{"cve":"CVE-2025-54413","nvd":{"published":"2025-07-26T04:16:06.793","modified":"2026-06-17T09:40:03.373","status":"Deferred","description":"skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode, which can be exploited to access unexpected object fields through dot notation. This can be used to achieve arbitrary code execution at load time. While this issue may seem similar to GHSA-m7f4-hrc6-fwg3, it is actually more severe, as it relies on fewer assumptions about trusted types. This is fixed in version 12.0.0.","cvss_v4":{"vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","score":8.7},"cvss_v3":null,"cwes":["CWE-351"],"references":["https://drive.google.com/drive/folders/1bmVV18mnPbWy21hVYgf51yVJpf78vtB_?usp=sharing","https://github.com/skops-dev/skops/commit/0aeca055509dfb48c1506870aabdd9e247adf603","https://github.com/skops-dev/skops/releases/tag/v0.12.0","https://github.com/skops-dev/skops/security/advisories/GHSA-4v6w-xpmh-gfgp","https://github.com/skops-dev/skops/security/advisories/GHSA-m7f4-hrc6-fwg3"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:05:46.678065081+00:00"},"epss":{"cve":"CVE-2025-54413","score":0.00161,"percentile":0.0522,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-4v6w-xpmh-gfgp","url":"https://osv.dev/vulnerability/GHSA-4v6w-xpmh-gfgp","summary":"Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time","modified":"2026-07-07T17:56:24.374948433Z","packages":[{"ecosystem":"PyPI","name":"skops","purl":"pkg:pypi/skops","ranges":["<0.12.0"],"fixed":["0.12.0"]}]},{"id":"PYSEC-2026-1926","url":"https://osv.dev/vulnerability/PYSEC-2026-1926","summary":"Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time","modified":"2026-07-07T17:47:52.912979550Z","packages":[{"ecosystem":"PyPI","name":"skops","purl":"pkg:pypi/skops","ranges":["<0.12.0"],"fixed":["0.12.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}