Vulnerability · Published Jun 21, 2026 · Assigned by VulnCheck
CVE-2025-71378picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files
High 8.1
In plain English
A high-severity unsafe deserialization in picklescan from picklescan. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.5%top 58.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load().
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | picklescan | 0.0.30 | GHSA-9w88-8rmg-7g2p |
| PyPI | picklescan | 0.0.30 | PYSEC-2026-247 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| picklescan | picklescan | 0 – before 0.0.30 |
Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
References
- GHSA Advisory GHSA-9w88-8rmg-7g2p vendor-advisory
- VulnCheck Advisory: picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files third-party-advisory