---
id: 6663
title: "PyTorch Users at Risk: Unveiling 3 Zero-Day PickleScan Vulnerabilities"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/unveiling-3-zero-day-vulnerabilities-in-picklescan/"
published_at: "2025-12-02T14:26:13Z"
tags: ["ai-security", "supply-chain", "zero-day", "jfrog", "pickle", "pytorch", "picklescan", "jfrog-com"]
phying_url: "https://phying.com/item/6663"
lang: en
---

# PyTorch Users at Risk: Unveiling 3 Zero-Day PickleScan Vulnerabilities

## Summary

JFrog found three zero-days letting malicious models bypass PickleScan, the standard pickle scanner: scanning alone doesn't make PyTorch's pickle format safe—Safetensors migration still matters.

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2025-12-02T14:26:13Z
- **Original:** https://jfrog.com/blog/unveiling-3-zero-day-vulnerabilities-in-picklescan/
- **Phying News:** https://phying.com/item/6663