Vulnerability · Published Jul 26, 2025 · Assigned by GitHub_M

CVE-2025-54412skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution

High 8.7

In plain English

A high-severity security flaw in skops from skops-dev. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)0.2%top 94.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFuncNode which can be exploited to hide the execution of untrusted operator methods. This can then be used in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types. This is fixed in version 0.12.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	skops	0.12.0	GHSA-m7f4-hrc6-fwg3
PyPI	skops	0.12.0	PYSEC-2026-1927

Affected products (as reported)

Vendor	Product	Versions
skops-dev	skops	< 0.12.0

Weakness: CWE-351 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

https://github.com/skops-dev/skops/security/advisories/GHSA-m7f4-hrc6-fwg3 x_refsource_CONFIRM
https://github.com/skops-dev/skops/commit/0aeca055509dfb48c1506870aabdd9e247adf603 x_refsource_MISC
https://github.com/skops-dev/skops/releases/tag/v0.12.0 x_refsource_MISC