CVE-2025-71355highCWE-184

CVE-2025-71355: high-severity vulnerability in Picklescan

Picklescan - Arbitrary Code Execution via Unsafe Numpy Function Detection Bypass

Published · Updated

Follow this CVE+ Monitor picklescan+ Monitor picklescan

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.6epss 0.6%
Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected products
Picklescan · Picklescan
Related CVEs — Picklescan

In the same product, most dangerous first.

CVE-2025-71372HIGHPicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef GadgetEPSS 0.5%CVE-2025-71339HIGHPicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length GadgetEPSS 0.4%CVE-2025-46417MEDIUMCVE-2025-46417EPSS 0.2%