{"cve":"CVE-2025-70560","nvd":{"published":"2026-02-03T18:16:17.900","modified":"2026-06-17T10:03:20.780","status":"Modified","description":"Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.4},"cwes":["CWE-502"],"references":["https://github.com/advisories/GHSA-fjm6-8xp2-4fwc","https://github.com/jwohlwend/boltz/blob/cb04aeccdd480fd4db707f0bbafde538397fa2ac/src/boltz/data/mol.py#L80","https://github.com/jwohlwend/boltz/issues/600"],"products":["jwohlwend:boltz"],"source":"nvd","synced_at":"2026-10-19T22:22:27.261130201+00:00"},"epss":{"cve":"CVE-2025-70560","score":0.00174,"percentile":0.06814,"date":"2026-11-01"},"kev":null,"osv":[{"id":"GHSA-fjm6-8xp2-4fwc","url":"https://osv.dev/vulnerability/GHSA-fjm6-8xp2-4fwc","summary":"Boltz contains an insecure deserialization vulnerability in its molecule loading functionality","modified":"2026-07-07T17:56:36.377414133Z","packages":[{"ecosystem":"PyPI","name":"boltz","purl":"pkg:pypi/boltz","ranges":["<=2.0.0"],"fixed":[]}]},{"id":"PYSEC-2026-1224","url":"https://osv.dev/vulnerability/PYSEC-2026-1224","summary":"Boltz contains an insecure deserialization vulnerability in its molecule loading functionality","modified":"2026-07-07T17:47:33.522669757Z","packages":[{"ecosystem":"PyPI","name":"boltz","purl":"pkg:pypi/boltz","ranges":["<=2.0.0"],"fixed":[]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}