CVE-2025-54886 skops: Card.get_model does not block arbitrary code execution
Attackers can execute arbitrary code by providing non-zip model files, as the library silently falls back to unsafe joblib loading instead of secure skops validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-54886?
CVE-2025-54886 is a high-severity unsafe deserialization vulnerability in skops-dev skops, published on 8 Aug 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
skops is a Python library which helps users share and ship their scikit-learn based models. In versions 0.12.0 and below, the Card.get_model does not contain any logic to prevent arbitrary code execution. The Card.get_model function supports both joblib and skops for model loading. When loading .skops models, it uses skops' secure loading with trusted type validation, raising errors for untrusted types unless explicitly allowed. However, when non-.zip file formats are provided, the function silently falls back to joblib without warning. Unlike skops, joblib allows arbitrary code execution during loading, bypassing security measures and potentially enabling malicious code execution. This issue is fixed in version 0.13.0.
Weakness: CWE-502
Which versions are affected by CVE-2025-54886?
3 open source packages ship an affected version, including skops.
| Package | Affected | Fixed in |
|---|---|---|
skops PyPI | All versions | 0.13.0 |
skops PyPI | All versions | 0.13.0 |
skops PyPI | All versions | 0.13.0 |
How do I fix CVE-2025-54886?
Upgrade skops to 0.13.0 or later.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2025-54886 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-54886 exists.
Sources
Also known as GHSA-378x-6p4f-8jgm, PYSEC-2026-1925.