GitHub Advisoryadvisory · PyPI

GHSA-fjm6-8xp2-4fwc Boltz contains an insecure deserialization vulnerability in its molecule loading functionality

HIGH Published 2026-02-03 Modified 2026-02-04 Official page ↗
Aliases
CVE-2025-70560
Ecosystem
PyPI
Packages
boltz
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502
Reviewed
2026-02-04

Affected packages

• PyPI boltz: <= 2.0.0 (no fix yet)

Description

Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.

Related

Alias · CVE (1)

  • CVE-2025-70560 Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. vulnerability

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References