Vulnerability · Published Jul 4, 2026 · Assigned by VulnCheck
CVE-2025-71373picklescan - Remote Code Execution via operator.methodcaller Detection Bypass
High 8.1
In plain English
A high-severity security flaw in picklescan from picklescan. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.6%top 53.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle payloads using operator.methodcaller that execute arbitrary code when loaded, compromising systems relying on picklescan for validation.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | picklescan | 0.0.33 | GHSA-x843-g5mx-g377 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| picklescan | picklescan | 0 – before 0.0.33 |
Weakness: CWE-693 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
References
- GitHub Security Advisory (GHSA-x843-g5mx-g377) vendor-advisory
- VulnCheck Advisory: picklescan - Remote Code Execution via operator.methodcaller Detection Bypass third-party-advisory