Jwohlwend

jwohlwend

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Boltz

boltz

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-70560 1Jwohlwend 1Boltz Jun 17, 2026 Feb 3, 2026 N/A· v4 8.4 HIGH· v3 N/A· v2 Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability...Show more Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2025-70560

1Jwohlwend

1Boltz

Jun 17, 2026

Feb 3, 2026

N/A· v4

8.4 HIGH· v3

N/A· v2

Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.Show less