PT-2026-50452 · Pypi · Picklescan
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
picklescan versions prior to 0.0.33
Description
An arbitrary file writing issue exists because the default dangerous blocklist fails to include the
distutils module. While open() and shutil are blocked to prevent unauthorized file overwrites, attackers can bypass these restrictions by using the distutils.file util.write file function. By constructing malicious pickle objects, an attacker can overwrite critical system files, such as web server configurations, source code, or .ssh/authorized keys, leading to denial of service or remote code execution.Recommendations
Update to version 0.0.33 or later.
As a temporary mitigation, add
distutils to the blocklist to prevent the use of distutils.file util.write file.Exploit
Fix
RCE
DoS
Files Accessible to External Parties
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Picklescan