CVE-2025-71344

HIGH EPSS 28.6%

Published Jun 22, 20261w ago · Modified Jun 23, 20261w ago

7.6 CVSS 4.0

High

Published Jun 22, 2026 1w ago

Last Modified Jun 23, 2026 1w ago

Description

picklescan before 0.0.30 (affected versions 0.0.26 and earlier) fails to detect the ensurepip._run_pip built-in function when scanning pickle files, allowing attackers to execute arbitrary code. Malicious pickle files embedding ensurepip._run_pip calls in __reduce__ methods bypass picklescan detection and achieve remote code execution upon pickle.load() invocation.

CVSS Details

Base Score

7.6

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction P

Scope X

Threat Intelligence

EPSS Exploit Probability

28.6% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-502 Deserialization of Untrusted Data Validation

References 2

github.com https://github.com/mmaitre314/picklescan/security/advisories/GHSA-xp4f-hrf8-rxw7
vulncheck.com https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-undetected-ensurepip-run-pip-function

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.