HighVulnerability
CVE-2025-71340: picklescan fails to detect malicious pickle files invoking runcode in __reduce__
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-71340
- Published
- Record updated
- Affected
- picklescan < 0.0.30
- Fixed in
- 0.0.30
- released August 26, 2025, 303 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.4%
Summary
picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers can embed undetected code that runs arbitrary commands when the file is loaded via pickle.load(), enabling supply chain attacks on PyTorch models and saved Python objects.
Mitigation
This is fixed in version 0.0.30.
Topics
Related items
- MediumTop MCP security resources — November 2026Similar attack · Adversa AI Blog
- MediumAI broke the cybersecurity world. What’s next?Similar attack · The Verge (AI)
- InfoGem5-Shark: Smaug-based Heterogeneous Deep Learning Accelerator Security and Robustness Evaluation and Characterization FrameworkSimilar attack · OpenAlex (peer-reviewed AI security)
- InfoCVE-2026-123357: GROBID command execution through crafted PDF filename in Linux conversionSimilar attack · NVD/CVE Database
- MediumShai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI ToolsSimilar attack · Socket Blog