PT-2025-8707 · Pypi+1 · Pip+1
Madgetr
·
Published
2025-02-26
·
Updated
2025-09-30
·
CVE-2025-1716
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
picklescan versions prior to 0.0.21
Description
The issue allows an attacker to craft a malicious model that uses Pickle to pull in a malicious PyPI package via
pip.main(). This is possible because 'pip' is not treated as an unsafe global, causing the model to pass security checks and appear safe when scanned, even though it could be problematic.Recommendations
For picklescan versions prior to 0.0.21, update to version 0.0.21 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
pip.main() function to minimize the risk of exploitation.Exploit
Fix
Incomplete List of Disallowed Inputs
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Picklescan
Pip