id: PYSEC-2026-247
published: "2026-06-21T14:16:23.140Z"
modified: "2026-06-27T10:29:13.799417Z"
aliases:
- CVE-2025-71378
- GHSA-9w88-8rmg-7g2p
details: picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load().
affected:
- package:
    name: picklescan
    ecosystem: PyPI
    purl: pkg:pypi/picklescan
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 0.0.30
  versions:
  - 0.0.1
  - 0.0.10
  - 0.0.11
  - 0.0.12
  - 0.0.13
  - 0.0.14
  - 0.0.15
  - 0.0.16
  - 0.0.17
  - 0.0.18
  - 0.0.19
  - 0.0.2
  - 0.0.20
  - 0.0.21
  - 0.0.22
  - 0.0.23
  - 0.0.24
  - 0.0.25
  - 0.0.26
  - 0.0.27
  - 0.0.28
  - 0.0.29
  - 0.0.3
  - 0.0.4
  - 0.0.5
  - 0.0.6
  - 0.0.7
  - 0.0.8
  - 0.0.9
  ecosystem_specific: {}
references:
- type: ADVISORY
  url: https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-undetected-cprofile-runctx-in-pickle-files
- type: EVIDENCE
  url: https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9w88-8rmg-7g2p
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H