CVE-2025-71355
HIGHPicklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection Bypass
Title source: cnaDescription
Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
GitHub Security Advisory (GHSA-fj43-3qmq-673f)
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-fj43-3qmq-673f
Third Party Advisory third-party-advisory
VulnCheck Advisory: Picklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection Bypass
https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-unsafe-numpy-function-detection-bypass
Scores
CVSS v4
7.6
EPSS
0.0055
EPSS Percentile
43.0%
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
total
Details
CWE
CWE-184
Status
published
Products (2)
Picklescan/Picklescan
< 0.0.25
Picklescan/Picklescan
0.0.25
Published
Jun 30, 2026
Tracked Since
Jul 01, 2026