CVE-2025-71325: picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw
picklescan before 0.0.27 contains a parsing logic error in the listglobals function when handling STACKGLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pickle files with arguments at position zero to trigger unexpected exceptions and evade security scanning.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
picklescanto a version that resolves this vulnerability.Fixed in 0.0.27
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71325?
The severity of CVE-2025-71325 is critical, rated at 9.3.
How do I fix CVE-2025-71325?
To fix CVE-2025-71325, upgrade picklescan to version 0.0.27 or later.
What does CVE-2025-71325 affect?
CVE-2025-71325 affects picklescan versions prior to 0.0.27.
What type of vulnerability is CVE-2025-71325?
CVE-2025-71325 is a detection bypass vulnerability due to a parsing logic flaw.
Can CVE-2025-71325 allow for malicious attacks?
Yes, CVE-2025-71325 can allow attackers to craft malicious pickle files that bypass detection.