Vulnerability in Picklescan

CVE-2025-71355

Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.

Published 2026-06-30 · last modified 2026-09-30.

EPSS exploit prediction

EPSS: 0.006 (45.4th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 45th percentile — 45.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000

Affected products

Picklescan — versions 0, 0.0.25

Weakness classification (CWE)

CWE-184 — Incomplete List of Disallowed Inputs

References

github.com/mmaitre314/picklescan/security/advisories/GHSA-fj43-3qmq-673f (vendor-advisory)
www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-unsafe-num… (third-party-advisory)