CVE-2025-50472

CVE-2025-50472 ModelScope Ms-Swift ModelFileSystemCache Deserialization of Untrusted Data Remote Code Execution Vulnerability RCE PoC I uploaded a code repository containing a malicious .mdl file to ModelScope for testing purposes. It can be used directly during testing. The link is:...

CVE-2025-50472

The CVE-2025-50472 entry affects modelscope/ms-swift up to version 2.6.1, with a deserialization vulnerability in ModelFileSystemCache.load_model_meta() that uses pickle.load() on a hidden, malicious .mdl payload. This enables remote code execution during a normal training workflow when a tampere...

CVE-2025-50472

The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the loadmodelmeta function of the ModelFileSystemCache class. Attackers can execute arbitrary code and commands by crafting a malicious serialized .mdl payload,...