Back to CVE List

CVE-2025-71341

HIGH SEVERITY

CVSS Score & Metrics

Base Score
8.1 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Vulnerability Description

picklescan before 0.0.29 fails to detect the profile.Profile.runctx function when analyzing pickle files, allowing attackers to embed undetected malicious code. Remote attackers can craft malicious pickle files using profile.Profile.runctx in the reduce method to achieve remote code execution when the pickle file is loaded.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-502
Source
NVD
Vendor
picklescan
Product
picklescan

External References

Discussion (0)

Add Comment

No comments yet. Be the first!