CVE-2025-70560

Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a directory processed by boltz can achieve arbitrary code execution when the file is loaded.

• CWE-502

• https://github.com/advisories/GHSA-fjm6-8xp2-4fwc
• https://github.com/jwohlwend/boltz/blob/cb04aeccdd480fd4db707f0bbafde538397fa2ac/src/boltz/data/mol.py#L80Product
• https://github.com/jwohlwend/boltz/issues/600Issue Tracking

Published

Feb 3, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-7052The LatePoint plugin for WordPress is vulnerable to Cross-Si…8.8
• CVE-2025-7053A vulnerability was found in Cockpit up to 2.11.3. It has be…6.1
• CVE-2025-7054Cloudflare quiche was discovered to be vulnerable to an infi…6.5
• CVE-2025-70545A stored cross-site scripting (XSS) vulnerability exists in …6.1
• CVE-2025-70559pdfminer.six before 20251230 contains an insecure deserializ…6.5
• CVE-2025-7056Improper Neutralization of Input During Web Page Generation …6.3
• CVE-2025-7057Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2025-7058The Kingcabs theme for WordPress is vulnerable to Stored Cro…6.4
• CVE-2025-7059The Simple Featured Image plugin for WordPress is vulnerable…6.4
• CVE-2025-7060A vulnerability was found in Monitorr up to 1.7.6m. It has b…8.1
• CVE-2025-7061A vulnerability was found in Intelbras InControl up to 2.21.…2.7
• CVE-2025-70614OpenCode Systems OC Messaging / USSD Gateway OC Release 6.32…8.1