Critical PickleScan Vulnerabilities Expose AI Model Supply Chains

Three critical zero-day vulnerabilities (CVE-2025-10155, CVE-2025-10156, CVE-2025-10157) were disclosed in PickleScan — a popular scanner for Python pickle files and PyTorch models — enabling attackers to bypass scans via file-extension misclassification, ZIP CRC manipulation, and import-blacklist evasion; each flaw is rated CVSS 9.3, a proof-of-concept was demonstrated, and maintainers patched the issues (update to PickleScan 0.0.31) while recommending layered defenses and safer model formats like Safetensors.