CVE-2025-71320: picklescan - Remote Code Execution via Incomplete Disallowed Inputs
picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.methodcaller functions, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle files using these unblocked functions to achieve arbitrary code execution when the pickle is deserialized.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
picklescanto a version that resolves this vulnerability.Fixed in 0.0.33 - Configuration
Update the deny-list used by picklescan to explicitly include pydoc.locate and operator.methodcaller so these functions are blocked during validation.
picklescan deny-list deny_list = pydoc.locate, operator.methodcaller - Compensating control
Do not deserialize pickle data from untrusted sources; reject or process untrusted pickle files only in isolated/fully controlled environments to prevent remote code execution.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71320?
CVE-2025-71320 has a severity rating of 9.3, making it critical.
How do I fix CVE-2025-71320?
To fix CVE-2025-71320, update picklescan to version 0.0.33 or later.
What type of vulnerability is CVE-2025-71320?
CVE-2025-71320 is a remote code execution vulnerability.
What can be exploited in CVE-2025-71320?
CVE-2025-71320 allows attackers to bypass security checks by using unblocked functions to execute arbitrary code.
Which software is affected by CVE-2025-71320?
The vulnerability affects the picklescan software on PyPI before version 0.0.33.