CVE-2025-54412

Description

skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFuncNode which can be exploited to hide the execution of untrusted operator methods. This can then be used in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types. This is fixed in version 0.12.0.

Is your site exposed to CVE-2025-54412?

Run a free security scan — no signup, results in seconds.

Weakness Type (CWE)

CWE-351 CWE-351

References

Other References

https://github.com/skops-dev/skops/commit/0aeca055509dfb48c1506870aabdd9e247adf603 https://github.com/skops-dev/skops/releases/tag/v0.12.0 https://github.com/skops-dev/skops/security/advisories/GHSA-m7f4-hrc6-fwg3

Frequently Asked Questions

What is CVE-2025-54412? +

skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFuncNode which can be exploited to hide the execution of untrusted operator methods. This can then be used in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types. This is fixed in version 0.12.0.

How do I check if I'm vulnerable to CVE-2025-54412? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-15305

Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. …

CVE-2025-54413

skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain …

CVE-2025-30510 9.8

An attacker can upload an arbitrary file instead of a plant image.

CVE-2025-31951 8.8

HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's …

CVE-2025-65960 6.6

Contao is an Open Source CMS. From version 4.0.0 to before 4.13.57, before 5.3.42, and before 5.6.5, back end users …

CVE-2024-4769 5.9

When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses. This could …