CVE-2025-71463
Received Received - Intake

Scapy Insecure Deserialization Leading to Code Execution

Publication date: 2026-11-13

Last updated on: 2026-11-13

Assigner: VulnCheck

Description
Scapy before 2.7.0 contains an insecure deserialization vulnerability in the load_session function that allows attackers to execute code by supplying a malicious pickle session file. Attackers can trick users into loading a crafted .pkl.gz file via the -s option or conf.session, executing embedded Python code through __reduce__().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-13
Last Modified
2026-11-13
Generated
2026-11-13
AI Q&A
2026-11-13
EPSS Evaluated
N/A
NVD
CVE-2025-71463
EUVD
EUVD-2025-211318

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
scapy scapy to 2.7.0 (exc)
secdev scapy to 2.7.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-502 The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Scapy before version 2.7.0 has an insecure deserialization flaw in the load_session function. Attackers can exploit this by providing a malicious pickle session file (.pkl.gz). When a user loads this file via the -s option or conf.session, embedded Python code executes through the __reduce__() method, allowing arbitrary code execution.

Detection Guidance

To detect this vulnerability, inspect network traffic or system logs for unusual pickle session file (.pkl.gz) transfers or loading attempts. Check if Scapy versions before 2.7.0 are installed using commands like 'pip show scapy' or 'scapy --version'.

Impact Analysis

If you use Scapy before 2.7.0, an attacker could trick you into opening a specially crafted file. This could lead to unauthorized code execution on your system, potentially allowing the attacker to take control of your computer or steal sensitive data.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR and HIPAA requirements for data protection and security. Organizations using vulnerable Scapy versions may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Upgrade Scapy to version 2.7.0 or later immediately. Avoid loading untrusted pickle session files. Disable the -s option or conf.session if not required. Monitor for suspicious activity related to pickle file handling.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-71463. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...