CVE-2025-51427

HighCVSS 7.3

Published: 19/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

41th percentile - higher than 41% of all known CVEs

Summary

An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via a crafted module listed in the configuration file (dey_mini.yaml) under the key ['nnet']['module'].

Risk Assessment

An attacker can remotely execute arbitrary code on the server, potentially leading to complete system compromise.

Recommendation

Update ModelScope to a version without this vulnerability or avoid using untrusted configuration files.

Other vulnerabilities in ModelScope

CVE-2026-84202High
ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users.

Original NVD description (English source)

An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file (dey_mini.yaml) under the key ['nnet']['module'].