PT-2026-50451 · Pypi · Picklescan

0X-Apollyon · CVE-2025-71320 · Published 2025-12-29 · Updated 2026-07-07

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.33

Description An incomplete deny-list fails to block the pydoc.locate() and operator.methodcaller() functions. This allows remote attackers to bypass security checks by crafting malicious pickle files. The pydoc.locate() function can dynamically resolve and import arbitrary modules, while operator.methodcaller() enables the execution of a method on an object. When combined, these functions can be used to achieve arbitrary code execution during the deserialization of the pickle file.

Recommendations Update to version 0.0.33 or later.

Exploit

Fix

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-184

Related Identifiers

CVE-2025-71320

GHSA-6V84-V468-3C7F

GHSA-84R2-JW7C-4R5Q

PYSEC-2026-1785

Affected Products

Picklescan

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71320.json · Exploit
• 🔥 https://github.com/mmaitre314/picklescan/security/advisories/GHSA-84r2-jw7c-4r5q · Exploit
• https://osv.dev/vulnerability/PYSEC-2026-1785 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-84r2-jw7c-4r5q · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71320 · Security Note
• https://osv.dev/vulnerability/CVE-2025-71320 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6v84-v468-3c7f · Vendor Advisory
• https://github.com/mmaitre314/picklescan/pull/53 · Note
• https://github.com/mmaitre314/picklescan/commit/70c1c6c31beb6baaf52c8db1b6c3c0e84a6f9dab · Note
• https://github.com/mmaitre314/picklescan · Note
• https://github.com/mmaitre314/picklescan/releases/tag/v0.0.33 · Note
• https://vulncheck.com/advisories/picklescan-remote-code-execution-via-incomplete-disallowed-inputs · Note
• https://github.com/advisories/GHSA-84r2-jw7c-4r5q · Note
• https://t.me/cveNotify/170001 · Telegram Post
• https://pypi.org/project/picklescan · Note