CVE-2025-71325

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.27 modelscan (affected versions not specified)

Description A parsing logic error exists in the list globals() function when processing STACK GLOBAL opcodes. The scanner fails to track arguments in the correct range, specifically omitting the opcode at position 0 by only considering the range from 1 to n-1. This allows attackers to craft malicious pickle files with arguments at position 0, triggering unexpected exceptions that result in a detection bypass. This issue also affects online Hugging Face pickle scanners.

Recommendations Update picklescan to version 0.0.27 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for modelscan.