PT-2026-50452 · Pypi · Picklescan

·

CVE-2025-71321

·

Published

2025-12-29

·

Updated

2026-07-07

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.33
Description An arbitrary file writing issue exists because the default dangerous blocklist fails to include the distutils module. While open() and shutil are blocked to prevent unauthorized file overwrites, attackers can bypass these restrictions by using the distutils.file util.write file function. By constructing malicious pickle objects, an attacker can overwrite critical system files, such as web server configurations, source code, or .ssh/authorized keys, leading to denial of service or remote code execution.
Recommendations Update to version 0.0.33 or later. As a temporary mitigation, add distutils to the blocklist to prevent the use of distutils.file util.write file.

Exploit

Fix

RCE

DoS

Files Accessible to External Parties

Deserialization of Untrusted Data

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-71321
GHSA-M273-6V24-X4M4
GHSA-RMPP-8WF5-XX5Q
PYSEC-2026-1791

Affected Products

Picklescan