Vulnerability · Published May 19, 2026 · Assigned by mitre
CVE-2025-51427
High 7.3
In plain English
A high-severity code injection in the modelscope package (PyPI). Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.5%top 55.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file (dey_mini.yaml) under the key ['nnet']['module'].
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | modelscope | 1.27.0 | GHSA-fhhq-h4hg-549x |
| PyPI | modelscope | 1.27.0 | PYSEC-2026-2663 |
Affected products (as reported)
Weakness: CWE-94, CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- https://github.com/modelscope/modelscope/issues/1331
- https://github.com/modelscope/modelscope/pull/1333
- https://github.com/JIRUWOZHI/vulnerability-disclosure/blob/main/CVE-2025-51427/CVE_2025_51427.md
- https://access.redhat.com/security/cve/CVE-2025-51427 vdb-entry, x_refsource_REDHAT
- RHBZ#2479894 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-51427.json x_sadp-csaf-vex