CVE-2026-53874

CRITICAL

picklescan - Arbitrary Code Execution via Obfuscated eval Call

Title source: cna
STIX 2.1

Description

picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute arbitrary code by hiding eval calls nested under callable objects via getattr. Attackers can embed malicious code in pickle files that evades detection but executes when the pickle is loaded from untrusted sources.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory
GHSA Advisory GHSA-9m3x-qqw2-h32h
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9m3x-qqw2-h32h
Third Party Advisory third-party-advisory
VulnCheck Advisory: picklescan - Arbitrary Code Execution via Obfuscated eval Call
https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-obfuscated-eval-call

Scores

CVSS v3 9.8
EPSS 0.0052
EPSS Percentile 40.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-502
Status published
Products (3)
picklescan/picklescan < 1.0.1
picklescan/picklescan 1.0.1
pypi/picklescan 0 - 1.0.1PyPI
Published Jun 17, 2026
Tracked Since Jun 17, 2026