{"id":"CVE-2025-71320","aliases":[],"cve":{"records":[{"id":"CVE-2025-71320","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-06-08T20:44:31.209Z","published":"2026-06-17T15:04:58.000Z","modified":"2026-11-08T14:00:23.178Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-11-08T14:00:23.178Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-06-17T17:54:59.297Z"}],"references":[{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-84r2-jw7c-4r5q","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-incomplete-disallowed-inputs","tags":["third-party-advisory"],"source":"VulnCheck"},{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-84r2-jw7c-4r5q","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-184","description":"Incomplete List of Disallowed Inputs","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mmaitre314:picklescan:*:*:*:*:*:*:*:*","versionEndExcluding":"0.0.33"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-06-17T17:51:20.098816Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"total"}]}]},"title":"picklescan - Remote Code Execution via Incomplete Disallowed Inputs","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.methodcaller functions, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle files using these unblocked functions to achieve arbitrary code execution when the pickle is deserialized.","score":9.8,"severity":"critical","published":"2026-06-17T15:04:58.000Z","modified":"2026-11-08T14:00:23.178Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"picklescan","name":"picklescan","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"0.0.33","versionType":"semver"},{"version":"0.0.33","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:pypi/picklescan","packageIdentity":{"ecosystem":"PyPI","name":"picklescan"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2025-71320"}],"remediation":[],"references":["https://github.com/mmaitre314/picklescan/security/advisories/GHSA-84r2-jw7c-4r5q","https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-incomplete-disallowed-inputs"],"sources":[{"name":"CVE","id":"CVE-2025-71320","modified":"2026-11-08T14:00:23.178Z","url":"https://www.cve.org/CVERecord?id=CVE-2025-71320"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.3},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}],"sourceAffected":[],"observedAt":"2026-11-08T14:06:55.192Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:30:31.194Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T08:35:31.120Z","attemptedAt":"2026-11-09T08:35:31.120Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T08:35:31.711Z","attemptedAt":"2026-11-09T08:35:31.711Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T08:35:32.224Z","attemptedAt":"2026-11-09T08:35:32.224Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T08:35:31.711Z","attemptedAt":"2026-11-09T08:35:31.711Z"}],"evidence":[{"source":"NVD","id":"CVE-2025-71320","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71320","modified":"2026-10-12T22:10:00.247","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-09T08:35:31.120Z"},{"source":"NVD","id":"CVE-2025-71320","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71320","modified":"2026-10-12T22:10:00.247","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-09T08:35:31.120Z"},{"source":"GitHub Advisory Database","id":"GHSA-84r2-jw7c-4r5q","url":"https://github.com/advisories/GHSA-84r2-jw7c-4r5q","modified":"2026-06-18T14:40:37Z","checkedAt":"2026-11-09T08:35:31.711Z"},{"source":"FIRST EPSS","id":"CVE-2025-71320","url":"https://www.first.org/epss/","probability":0.00823,"percentile":0.57579,"date":"2026-11-08","checkedAt":"2026-11-09T08:35:31.711Z"},{"source":"ENISA EUVD","id":"EUVD-2025-210267","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210267","modified":"Nov 8, 2026, 2:00:23 PM","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","checkedAt":"2026-11-09T08:35:32.224Z"}],"aiSummary":{"text":"picklescan before 0.0.33 has an incomplete deny-list, allowing attackers to bypass security checks and potentially execute arbitrary code when a malicious pickle file is deserialized. The weakness is due to unblocked pydoc.locate and operator.methodcaller functions. Remote attackers can craft malicious pickle files to exploit this vulnerability.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-08T16:56:10.658Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2025-71320"}]}}