CVE-2025-71355

HIGH

Picklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection Bypass

Title source: cna
STIX 2.1

Description

Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory
GitHub Security Advisory (GHSA-fj43-3qmq-673f)
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-fj43-3qmq-673f
Third Party Advisory third-party-advisory
VulnCheck Advisory: Picklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection Bypass
https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-unsafe-numpy-function-detection-bypass

Scores

CVSS v4 7.6
EPSS 0.0055
EPSS Percentile 43.0%
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-184
Status published
Products (2)
Picklescan/Picklescan < 0.0.25
Picklescan/Picklescan 0.0.25
Published Jun 30, 2026
Tracked Since Jul 01, 2026