Vulnerability · Published Jun 24, 2026 · Assigned by VulnCheck
CVE-2025-71354picklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetText
High 8.1
In plain English
A high-severity unsafe deserialization in picklescan from picklescan. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.4%top 60.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.debugobj.ObjectTreeItem.SetText function in reduce methods. Attackers can craft pickle files with embedded code that bypasses picklescan detection and executes arbitrary commands when pickle.load() is called.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | picklescan | 0.0.29 | GHSA-3vg9-h568-4w9m |
| PyPI | picklescan | 0.0.29 | PYSEC-2026-1781 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| picklescan | picklescan | 0 – before 0.0.29 |
Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
References
- GitHub Security Advisory (GHSA-3vg9-h568-4w9m) vendor-advisory
- VulnCheck Advisory: picklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetText third-party-advisory