PickleScan 0

Cyberpress • December 4, 2025

Share: View original

However, three critical zero - day vulnerabilities discovered in PickleScan the industry-standard tool for scanning PyTorch models have exposed ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Zero-Day Vulnerabilities Found in PickleScan Tool Multiple critical zero-day vulnerabilities have been identified in PickleScan, an open-source tool used for scanning machine learning models for malicious code. This tool is widely utilized in the AI community, including by Hugging Face, to evaluate PyTorch models saved in Python's pickle format, which can execute arbitrary Python code when loaded. 3 sources 47

Extracted Entities

Attack Types (1)

Zero-day Exploit

Tools (1)