picklescan Arbitrary Code Execution via cProfile.runctx

Executive Summary

The vulnerability CVE-2025-71378 affects the picklescan library versions before 0.0.30. It occurs because picklescan fails to detect the use of the Python function cProfile.runctx within pickle file reduce methods. This failure allows attackers to craft malicious pickle files that bypass picklescan's detection.

When these malicious pickle files are loaded using the pickle.load() function, the embedded code executes arbitrary commands on the victim's system. This is a form of Remote Code Execution (RCE) vulnerability caused by unsafe deserialization of untrusted data.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to remote code execution on systems that use vulnerable versions of picklescan to verify pickle files. Attackers can distribute malicious pickle files containing harmful payloads that execute arbitrary code when loaded.

• Execution of arbitrary code remotely without requiring privileges.
• Potential compromise of systems that load untrusted pickle files.
• Supply chain risks by distributing infected pickle files through machine learning models, APIs, or saved Python objects.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves malicious pickle files that use cProfile.runctx function calls within their reduce methods to execute arbitrary code. Detection requires inspecting pickle files for such suspicious reduce methods.

Since picklescan versions before 0.0.30 fail to detect these malicious calls, upgrading picklescan to version 0.0.30 or later is recommended to improve detection.

To detect potentially malicious pickle files on your system, you can use Python commands to safely inspect pickle files without loading them directly, for example by analyzing the pickle bytecode or using updated picklescan tools.

• Upgrade picklescan to version 0.0.30 or later and run it against pickle files to detect malicious cProfile.runctx calls.
• Use Python scripts to parse pickle files and look for suspicious reduce methods involving cProfile.runctx.

Useful 0 Not Useful 0

Mitigation Strategies

The primary mitigation step is to upgrade picklescan to version 0.0.30 or later, which includes detection for the malicious cProfile.runctx calls in pickle files.

Avoid loading pickle files from untrusted or unauthenticated sources using pickle.load(), as this can lead to remote code execution.

Implement strict validation and scanning of pickle files before loading them in your applications.

• Upgrade picklescan to version 0.0.30 or newer.
• Do not load pickle files from untrusted sources without prior scanning.
• Use alternative safer serialization formats if possible.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability in picklescan allows attackers to execute arbitrary code via malicious pickle files, which can lead to unauthorized access or manipulation of data. This poses a significant security risk that could impact compliance with standards and regulations such as GDPR and HIPAA, which require protection of sensitive data and prevention of unauthorized access.

Specifically, the risk of remote code execution through deserialization of untrusted data (CWE-502) could lead to breaches of confidentiality and integrity, potentially resulting in exposure of personal or protected health information. Organizations using vulnerable versions of picklescan may fail to meet the security controls mandated by these regulations.

Therefore, until patched, this vulnerability could hinder compliance efforts by increasing the risk of data breaches and unauthorized system control.

Useful 0 Not Useful 0