skops' MethodNode can access unexpected object fields through dot notation, leading to…
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.
Summary
skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain an inconsistency in MethodNode, which can be exploited to access unexpected object fields through dot notation. This can be used to achieve arbitrary code execution at load time. While this issue may seem similar to GHSA-m7f4-hrc6-fwg3, it is actually more severe, as it relies on fewer assumptions about trusted types. This is fixed in version 12.0.0.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| skops-dev | skops | before 12.0.0 | 12.0.0 | Patch available | CNA |
| — | skops (PyPI) | before 0.12.0 | 0.12.0 | Patch available | GHSA-4v6w-xpmh-gfgp |
- skops Vendorskops-dev Affected before 12.0.0 Fixed in 12.0.0 Patch available CNA
- skops (PyPI) Vendor— Affected before 0.12.0 Fixed in 0.12.0 Patch available GHSA-4v6w-xpmh-gfgp
Remediation
- Fix · CNA skops (skops-dev) Fixed in 12.0.0
- Fix · GHSA-4v6w-xpmh-gfgp skops (PyPI) Fixed in 0.12.0 Advisory →
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2025-54413
- 2026-10-03 Alias added: GHSA-4v6w-xpmh-gfgp
References
Other 7
- https://github.com/skops-dev/skops/security/advisories/GHSA-4v6w-xpmh-gfgp
- https://github.com/skops-dev/skops/security/advisories/GHSA-m7f4-hrc6-fwg3
- https://github.com/skops-dev/skops/commit/0aeca055509dfb48c1506870aabdd9e247adf603
- https://drive.google.com/drive/folders/1bmVV18mnPbWy21hVYgf51yVJpf78vtB_?usp=sharing
- https://github.com/skops-dev/skops/releases/tag/v0.12.0
- https://github.com/io-no/CVE-Reports/tree/main/CVE-2025-54413
- https://github.com/skops-dev/skops
More skops-dev vulnerabilities
- TI-2025-34218 skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution CVSS 4.0HIGH 8.7
- TI-2025-34620 skops: Card.get_model does not block arbitrary code execution CVSS 3.1HIGH 8.4
- TI-2024-24603 Deserialization of untrusted data in skops-dev Skops CVSS 3.1HIGH 7.8
Sources
- CVE-2025-54413 · CVE Program
- CVE-2025-54413 · NVD
- FIRST EPSS
- GHSA-4v6w-xpmh-gfgp · GitHub Advisory Database · CC BY 4.0
- CVE-2025-54413 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences