id: PYSEC-2026-246
published: "2026-06-21T14:16:23.017Z"
modified: "2026-06-27T10:29:13.728333Z"
aliases:
- CVE-2025-71357
- GHSA-j343-8v2j-ff7w
details: picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims.
affected:
- package:
    name: picklescan
    ecosystem: PyPI
    purl: pkg:pypi/picklescan
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 0.0.30
  versions:
  - 0.0.1
  - 0.0.10
  - 0.0.11
  - 0.0.12
  - 0.0.13
  - 0.0.14
  - 0.0.15
  - 0.0.16
  - 0.0.17
  - 0.0.18
  - 0.0.19
  - 0.0.2
  - 0.0.20
  - 0.0.21
  - 0.0.22
  - 0.0.23
  - 0.0.24
  - 0.0.25
  - 0.0.26
  - 0.0.27
  - 0.0.28
  - 0.0.29
  - 0.0.3
  - 0.0.4
  - 0.0.5
  - 0.0.6
  - 0.0.7
  - 0.0.8
  - 0.0.9
  ecosystem_specific: {}
references:
- type: ADVISORY
  url: https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-undetected-idlelib-pyshell-modifiedinterpreter-runcommand
- type: EVIDENCE
  url: https://github.com/mmaitre314/picklescan/security/advisories/GHSA-j343-8v2j-ff7w
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H