Malicious Code Execution in Picklescan via Bypassed Pickle Detection

Publication date: 2026-06-30

Last updated on: 2026-06-30

Assigner: VulnCheck

Description

picklescan before 0.0.29 fails to detect malicious pickle files using code.InteractiveInterpreter.runcode in reduce methods. Attackers can craft pickle payloads that bypass picklescan detection and execute arbitrary code when loaded via pickle.load().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-30

Last Modified

2026-06-30

Generated

2026-07-01

AI Q&A

2026-07-01

EPSS Evaluated

N/A

NVD

CVE-2025-71371

EUVD

EUVD-2025-210391

Affected Vendors & Products

Vendor	Product	Version / Range
picklescan	picklescan	to 0.0.29 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

This vulnerability exists in picklescan versions before 0.0.29, where the tool fails to detect malicious pickle files that use the code.InteractiveInterpreter.runcode method within reduce methods. Attackers can craft specially designed pickle payloads that bypass picklescan's detection mechanisms and execute arbitrary code when these payloads are loaded using pickle.load().

Impact Analysis

The vulnerability allows attackers to execute arbitrary code on systems that use vulnerable versions of picklescan to scan pickle files. This can lead to unauthorized code execution, potentially compromising the affected system's security, leading to data breaches, system manipulation, or further exploitation.

Hi! I’m here to help you understand CVE-2025-71371. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70