CVE-2025-6279 | Upsonic up to 0.55.6 Pickle /tools/add_tool cloudpickle.loads deserialization (Issue 353)

June 19, 2025 Yanac

A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6. This issue affects the function cloudpickle.loads of the file /tools/add_tool of the component Pickle Handler. The manipulation leads to deserialization.

The identification of this vulnerability is CVE-2025-6279. Access to the local network is required for this attack. Furthermore, there is an exploit available.VulDB Recent EntriesRead More