PT-2026-55679 · Picklescan · Picklescan

Ac0D3R + 1 · Published 2026-07-04 · Updated 2026-07-04 · CVE-2025-71372

NVD

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypassing Picklescan's safety checks and enabling supply-chain poisoning of shared model files.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-71372

Affected Products

Picklescan

References · 3

• https://github.com/mmaitre314/picklescan/security/advisories/GHSA-rrxm-2pvv-m66x · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71372 · Security Note
• https://vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-numpy-f2py-crackfortran-getlincoef-gadget · Note