CVE-2025-50472

The CVE-2025-50472 entry affects modelscope/ms-swift up to version 2.6.1, with a deserialization vulnerability in ModelFileSystemCache.load_model_meta() that uses pickle.load() on a hidden, malicious .mdl payload. This enables remote code execution during a normal training workflow when a tampere...