GHSA-m9mp-6x32-5rhg scio is vunerable to Remote Command Execution through PyTorch
Attackers can execute arbitrary code via malicious PyTorch models in scio, requiring users to upgrade dependencies.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is GHSA-m9mp-6x32-5rhg?
GHSA-m9mp-6x32-5rhg is an unsafe deserialization vulnerability in scio-pypi, published on 9 Oct 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Impact
PyTorch reported a critical vulnerability when using torch.load, even with option weights_only=True, for torch <= 2.5.1.
In scio <= 1.0.0, the lower bound for torch is 2.3.
Patches
The lower bound was changed to torch >= 2.6, starting from scio >= 1.0.1 (currently in dev state).
Workarounds
You can manually check that you are using torch >= 2.6.
Which versions are affected by GHSA-m9mp-6x32-5rhg?
2 open source packages ship an affected version, including scio-pypi.
| Package | Affected | Fixed in |
|---|---|---|
scio-pypi PyPI | All versions to 1.0.0 | None |
scio-pypi PyPI | All versions to 1.0.0 | None |
How do I fix GHSA-m9mp-6x32-5rhg?
No fix has been published for GHSA-m9mp-6x32-5rhg yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is GHSA-m9mp-6x32-5rhg being exploited?
There is no known exploitation of GHSA-m9mp-6x32-5rhg in the wild and no public exploit code.