CVE-2025-71355
HighCVSS 7.6Exploitation Probability (EPSS)
Low risk42th percentile — higher than 42% of all known CVEs
Summary
Picklescan before version 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.
Risk Assessment
The organization is at risk of remote code execution (RCE) by loading a crafted pickle file, which could lead to system compromise, data theft, or lateral movement within the internal network.
Recommendation
Immediately update Picklescan to version 0.0.25 or later. Additionally, consider implementing additional security measures such as sandboxing deserialization processes and restricting access to untrusted pickle files.
Original NVD description (English source)
Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.