CVE-2025-54412 - CVE House
Back to Database
Status published High CVE-2025-54412

skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods Execution

Vulnerability Description

skops is a Python library which helps users share and ship their scikit-learn based models. Versions 0.11.0 and below contain a inconsistency in the OperatorFuncNode which can be exploited to hide the execution of untrusted operator methods. This can then be used in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types. This is fixed in version 0.12.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54412

Credits & Attribution

No credits recorded in the NVD database.

References

More from skops-dev

View All →
CVE-2025-54886
skops: Card.get_model does not block arbitrary code execution
High 8.4
CVE-2025-54413
skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load time
High 8.7

Affected Vendor

Affected Software

skops
Vulnerable Versions:
< 0.12.0

Timeline

Official Publish: July 26th, 2025
Last Modified: July 28th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-351

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.