PT-2026-50454 · Pypi · Picklescan

0X-Apollyon · CVE-2025-71323 · Published 2025-12-29 · Updated 2026-07-07

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.33

Description The software fails to block the ctypes module, which is a foreign function interface library used to call C functions directly, load DLLs, and manipulate raw memory pointers. This allows attackers to achieve remote code execution by invoking direct syscalls and accessing raw memory, bypassing sandbox protections and gadget chain detection. For example, malicious pickle files can be crafted using ctypes.WinDLL to load kernel32.dll and execute arbitrary commands.

Recommendations Update to version 0.0.33 or later.

Exploit

Fix

RCE

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-184

CWE-913

Related Identifiers

CVE-2025-71323

GHSA-4675-36F9-WF6R

GHSA-7F79-RVX6-VXC4

PYSEC-2026-1782

Affected Products

Picklescan

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71323.json · Exploit
• 🔥 https://github.com/mmaitre314/picklescan/security/advisories/GHSA-4675-36f9-wf6r · Exploit
• https://osv.dev/vulnerability/PYSEC-2026-1782 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71323 · Security Note
• https://osv.dev/vulnerability/GHSA-4675-36f9-wf6r · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7f79-rvx6-vxc4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-71323 · Vendor Advisory
• https://github.com/mmaitre314/picklescan/pull/53 · Note
• https://github.com/mmaitre314/picklescan · Note
• https://github.com/mmaitre314/picklescan/commit/70c1c6c31beb6baaf52c8db1b6c3c0e84a6f9dab · Note
• https://github.com/mmaitre314/picklescan/releases/tag/v0.0.33 · Note
• https://t.me/cveNotify/170004 · Telegram Post
• https://vulncheck.com/advisories/picklescan-remote-code-execution-via-unblocked-ctypes-module · Note
• https://pypi.org/project/picklescan · Note
• https://github.com/advisories/GHSA-4675-36f9-wf6r · Note