CVE-2025-70560: Boltz Package Insecure Deserialization Vulnerability
Summary
CVE-2025-70560: Boltz contains an insecure deserialization vulnerability in its molecule loading functionality. Affects boltz versions < 2.0.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Boltz is a Python package available on PyPI that facilitates the loading and manipulation of molecular data files. It is designed for users who require a robust solution for handling molecular structures in their applications. However, Boltz 2.0.0 has been identified to have an insecure deserialization vulnerability, which poses a significant risk to users who rely on this package for their molecular data processing needs.
Vulnerability Detail
The vulnerability arises from Boltz's use of Python's pickle module to deserialize molecule data files without any validation. This means that if an attacker can place a malicious pickle file in a directory that Boltz processes, they can execute arbitrary code on the system when the file is loaded. This could lead to severe consequences, including unauthorized access to sensitive data, system compromise, or further exploitation of the affected environment.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users should avoid loading pickle files from untrusted sources. Implementing strict file validation and using safer serialization formats, such as JSON, can also mitigate the risk until the package is updated.
Conclusion
The insecure deserialization vulnerability in Boltz 2.0.0 poses a significant risk to users, allowing for arbitrary code execution through malicious pickle files. It is crucial to update to the latest version of the package and implement best practices for file handling to mitigate this risk.
See every vulnerability recorded for boltz →
FAQ
The vulnerability is an insecure deserialization issue that allows arbitrary code execution through malicious pickle files.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If an immediate update is not possible, ensure that you do not load pickle files from untrusted sources and consider using safer serialization methods.
The CVSS score of this vulnerability is 8.4, indicating a high severity level.
You can visit Vulert at https://vulert.com, which monitors and alerts for open-source vulnerabilities in your software.
