Skip to content
Threat Feed
Subscribe

Product

Picklescan < 0.0.34

1 brief RSS
high advisory

CVE-2025-71367: Picklescan Bypass Leading to Arbitrary Code Execution

Picklescan versions prior to 0.0.34 contain a deserialization vulnerability (CVE-2025-71367) that allows remote attackers to bypass security checks by crafting malicious pickle files using `_operator.attrgetter` in reduce methods, leading to arbitrary code execution when `pickle.load()` processes the file.

picklescan < 0.0.34 deserialization vulnerability python pickle rce
2t 1c