Boltz vulnerabilities

1 known vulnerability in Boltz from Jwohlwend. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.4 High severity

  Boltz: Deserialization of Untrusted Data

  CVE-2025-70560Feb 3, 2026Jwohlwend

  Boltz 2.0.0 contains an insecure deserialization vulnerability in its molecule loading functionality. The application uses Python pickle to deserialize molecule data files without validation. An attacker with the ability to place a malicious pickle file in a d