CVE-2025-54413: Skops Arbitrary Code Execution via MethodNode Vulnerability
Summary
CVE-2025-54413: An inconsistency in MethodNode can be exploited to access unexpected object fields through dot notation. Affects skops versions < 0.12.0. Fixed in 0.12.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Skops is a Python library designed for model serialization and deserialization, enabling users to save and load machine learning models seamlessly. It provides a structured way to handle complex model objects, ensuring that they can be easily shared and reused. However, a critical vulnerability has been identified in the way Skops handles certain nodes, specifically the MethodNode, which can lead to severe security risks.
Vulnerability Detail
The vulnerability arises from an inconsistency in the MethodNode implementation, which allows access to unexpected object fields through dot notation. This flaw can be exploited to achieve arbitrary code execution at load time. The MethodNode does not properly enforce checks on the class and module fields, enabling attackers to traverse the object hierarchy and access harmful attributes or methods without triggering security alerts. This could lead to unauthorized code execution on the victim's machine, posing a significant threat, especially in collaborative environments where Skops is commonly used.
How To Fix
Latest published version: 0.16.0 as of 23 Oct 2026
pip install --upgrade "skops==0.16.0"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.12.0
This is the first release that contains the fix.
pip install --upgrade "skops==0.12.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid loading untrusted models or schemas that utilize MethodNode until the package is updated. Ensure that any model files are from trusted sources only.
Conclusion
In summary, CVE-2025-54413 is a critical vulnerability in the Skops library that allows for arbitrary code execution due to improper handling of MethodNode. Users are strongly advised to update to the patched version 0.12.0 or later to mitigate this risk. Until then, it is crucial to avoid using untrusted models.
See every vulnerability recorded for skops →
FAQ
CVE-2025-54413 is a vulnerability in the Skops library that allows arbitrary code execution through improper handling of MethodNode.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update Skops right away, avoid loading untrusted models and ensure that any models you use are from verified sources.
Failing to address this vulnerability can lead to unauthorized code execution, potentially compromising the security of your system and data.
You can find more information about Skops on its official GitHub repository or documentation pages.
References
Related vulnerabilities
Recent vulnerabilities recorded for skops.
