CVE-2025-50472 Deserialization in n/a
Attackers can execute arbitrary code by tricking users into loading malicious serialized model files in the ms-swift library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-50472?
CVE-2025-50472 is a critical unsafe deserialization vulnerability in n/a, published on 1 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_model_meta()` function of the `ModelFileSystemCache()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized `.mdl` payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine. Note that the payload file is a hidden file, making it difficult for the victim to detect tampering. More importantly, during the model training process, after the `.mdl` file is loaded and executes arbitrary code, the normal training process remains unaffected'meaning the user remains unaware of the arbitrary code execution.
Weakness: CWE-502
Which versions are affected by CVE-2025-50472?
How do I fix CVE-2025-50472?
No fix has been published for CVE-2025-50472 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2025-50472 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-50472 exists.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-qgm9-fp3r-vm5v.