CVE-2025-71370 | picklescan up to 0.0.27 torch.jit.unsupported_tensor_ops.execWrapper deserialization (GHSA-vr7h-p6mm-wpmh)

June 23, 2026 Yanac

A vulnerability labeled as critical has been found in picklescan up to 0.0.27. This affects the function torch.jit.unsupported_tensor_ops.execWrapper. Executing a manipulation can lead to deserialization.

This vulnerability is handled as CVE-2025-71370. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More