CVE-2025-71340CWE-502insecure-deserialization

CVE-2025-71340

High · published June 26, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers can embed undetected code in pickle files that executes arbitrary commands when the file is loaded via pickle.load(), enabling supply chain attacks on PyTorch models and saved Python objects. This is fixed in version 0.0.30.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00380 · 30.8th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-06-26T02:16Z
References (3)
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-3gf5-cxq9-w223 · [email protected]https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-idlelib-pyshell-modifiedinterpreter-runcode · [email protected]https://github.com/mmaitre314/picklescan/security/advisories/GHSA-3gf5-cxq9-w223 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 25 JUN 21:41Z
    picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcode
    cvelistv5