CVE-2025-45146

Description

ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/data_manager.py. This vulnerability allows attackers to execute arbitrary code via supplying crafted data.

Reserved 2025-04-22 | Published 2025-08-11 | Updated 2025-08-11 | Assigner mitre

References

github.com/...5a009b77d64/modelcache/manager/data_manager.py

github.com/...31bb85a009b77d64/modelcache/manager/factory.py

pytorch.org/docs/stable/generated/torch.load.html

github.com/...ty-Research/blob/main/CVE-2025-45146/README.md

cve.org (CVE-2025-45146)

nvd.nist.gov (CVE-2025-45146)

Download JSON