{"data":{"id":"81478455-56a2-4432-aa61-297b3f806ff4","title":"CVE-2025-71340: picklescan through 0.0.26 fails to detect malicious pickle files that invoke…","summary":"picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers can embed undetected code that runs arbitrary commands when the file is loaded via pickle.load(), enabling supply chain attacks on PyTorch models and saved Python objects.","solution":"This is fixed in version 0.0.30.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-71340","publishedAt":"2026-06-25T22:16:59.647Z","cveId":"CVE-2025-71340","cweIds":["CWE-502"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["picklescan@< 0.0.30 (fixed: 0.0.30)"],"affectedPackageNames":["picklescan"],"affectedPackageRefs":["pypi:picklescan"],"affectedVendors":[],"affectedVendorsRaw":["picklescan","PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"picklescan fails to detect malicious pickle files invoking runcode in __reduce__","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.0038,"epssCheckedAt":"2026-11-09T18:09:52.424Z","kevDateAdded":null,"advisoryAliases":["GHSA-mq7r-vm99-p7vx","GHSA-3gf5-cxq9-w223"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-11-10T00:11:40.815Z","patchAvailable":true,"disclosureDate":"2026-06-25T22:16:59.647Z","fixReleasedAt":"2025-08-26T19:37:17.550Z","daysToFix":-303,"fixCheckedAt":"2026-11-10T00:11:48.370Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"picklescan","fixedVersion":"0.0.30","matchedVersion":"0.0.30","fixReleasedAt":"2025-08-26T19:37:17.550Z","daysToFix":-303,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-11-10T00:11:48.369Z"}]}}