Vulnerability · Published Sep 17, 2025 · Assigned by JFROG

CVE-2025-10156PickleScan Security Bypass via Bad CRC in ZIP Archive

Critical 9.3

In plain English

A critical-severity security flaw in picklescan from mmaitre314. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)9.3Critical

Exploit odds (30 days)1.5%top 25.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check (CRC), which causes the scanner to halt and fail to analyze the contents for malicious pickle files. When the file incorrectly considered safe is loaded, it can lead to the execution of malicious code.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	picklescan	0.0.31	GHSA-mjqp-26hc-grxg
PyPI	picklescan	0.0.31	PYSEC-2025-152

Affected products (as reported)

Vendor	Product	Versions
mmaitre314	picklescan	0 – through 0.0.30

Weakness: CWE-755 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

Proof of Concept (Archive with Bad CRC) exploit
Example of Failing Scan on Hugging Face exploit
Vulnerable Code Snippet related
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-mjqp-26hc-grxg vendor-advisory