CVE-2025-71340: picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcode
picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in reduce methods. Attackers can embed undetected code in pickle files that executes arbitrary commands when the file is loaded via pickle.load(), enabling supply chain attacks on PyTorch models and saved Python objects. This is fixed in version 0.0.30.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
picklescanto a version that resolves this vulnerability.Fixed in 0.0.30 - Compensating control
Do not load untrusted Python pickle files with pickle.load(); instead, avoid pickle.load() for external/unknown inputs because malicious pickle payloads can execute arbitrary commands.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71340?
The severity of CVE-2025-71340 is rated high with a CVSS score of 7.6.
How do I fix CVE-2025-71340?
To mitigate CVE-2025-71340, update to a version of picklescan that detects malicious pickle files.
What can an attacker do with CVE-2025-71340?
An attacker can execute arbitrary commands on the system by embedding malicious code in pickle files that utilize idlelib.pyshell.ModifiedInterpreter.runcode.
What software is vulnerable to CVE-2025-71340?
The vulnerable software is picklescan, specifically versions before 0.0.26.
When was CVE-2025-71340 published?
CVE-2025-71340 was published on June 25, 2026.