CVE-2025-1716

CRITICAL

picklescan <0.0.21 - Code Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 4 public exploits for CVE-2025-1716. PoCs published by adminlove520, danigil, 0xDaeras.

AI-analyzed exploit summary The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.

Description

picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package (hosted, for example, on pypi.org or GitHub) via `pip.main()`. Because pip is not a restricted global, the model, when scanned with picklescan, would pass security checks and appear to be safe, when it could instead prove to be problematic.

Exploits (4)

github WORKING POC 2 stars
by adminlove520 · pythonpoc
https://github.com/adminlove520/CVE-Poc_All_in_One/tree/main/2025/CVE-2025-1716

The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.

Classification
Working Poc 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: TOTOLINK LR350, TOTOLINK T6, Fortinet SSL VPN
No auth needed
Prerequisites: network access to the target device
devstral-2 · analyzed Feb 27, 2026 Full analysis →
nomisec TROJAN
by danigil · poc
https://github.com/danigil/cve-2025-1716

The repository contains a malicious setup.py that executes an arbitrary command (touch /tmp/cve-2025-1716.txt) during installation, which is unrelated to the stated CVE. No legitimate exploit code or technical details are provided.

Classification
Trojan 95%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unspecified
No auth needed
Prerequisites: victim runs setup.py
devstral-2 · analyzed Mar 01, 2026 Full analysis →
nomisec WORKING POC
by 0xDaeras · poc
https://github.com/0xDaeras/POC_CVE-2025-1716

This PoC exploits CVE-2025-1716 by leveraging a malicious `setup.py` file to execute arbitrary commands during package installation. The `os.system` call reads `/app/flag.txt`, demonstrating command injection via package installation.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Python package installation (setup.py)
No auth needed
Prerequisites: Victim must install the malicious package
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec TROJAN
by xp3s · poc
https://github.com/xp3s/poc_CVE-2025-1716

The repository claims to be a PoC for CVE-2025-1716 but contains a malicious `setup.py` that silently executes a curl command to fetch a remote payload. No actual exploit code or details about the vulnerability are present.

Classification
Trojan 95%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unspecified
No auth needed
Prerequisites: victim runs `setup.py`
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Scores

CVSS v3 9.8
EPSS 0.1625
EPSS Percentile 95.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-184
Status published
Products (2)
mmaitre314/picklescan < 0.0.22
pypi/picklescan 0 - 0.0.22PyPI
Published Feb 26, 2025
Tracked Since Feb 18, 2026