{"id":"CVE-2025-71321","aliases":[],"cve":{"records":[{"id":"CVE-2025-71321","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-06-08T20:44:31.209Z","published":"2026-06-17T15:04:58.706Z","modified":"2026-11-08T14:00:23.977Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-11-08T14:00:23.977Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-06-17T18:12:17.635Z"}],"references":[{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-m273-6v24-x4m4","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/picklescan-arbitrary-file-writing-via-distutils-module-bypass","tags":["third-party-advisory"],"source":"VulnCheck"},{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-m273-6v24-x4m4","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-502","description":"Deserialization of Untrusted Data","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mmaitre314:picklescan:*:*:*:*:*:*:*:*","versionEndExcluding":"0.0.33"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-06-17T18:00:27.735700Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"total"}]}]},"title":"picklescan - Arbitrary File Writing via distutils Module Bypass","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.file_util.write_file. Attackers can construct malicious pickle objects to overwrite critical system files and achieve denial of service or remote code execution.","score":9.8,"severity":"critical","published":"2026-06-17T15:04:58.706Z","modified":"2026-11-08T14:00:23.977Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"picklescan","name":"picklescan","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"0.0.33","versionType":"semver"},{"version":"0.0.33","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:pypi/picklescan","packageIdentity":{"ecosystem":"PyPI","name":"picklescan"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2025-71321"}],"remediation":[],"references":["https://github.com/mmaitre314/picklescan/security/advisories/GHSA-m273-6v24-x4m4","https://www.vulncheck.com/advisories/picklescan-arbitrary-file-writing-via-distutils-module-bypass"],"sources":[{"name":"CVE","id":"CVE-2025-71321","modified":"2026-11-08T14:00:23.977Z","url":"https://www.cve.org/CVERecord?id=CVE-2025-71321"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.3},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}],"sourceAffected":[],"observedAt":"2026-11-08T14:06:56.382Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:30:31.194Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T08:30:35.531Z","attemptedAt":"2026-11-09T08:30:35.531Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T08:30:35.531Z","attemptedAt":"2026-11-09T08:30:35.531Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T08:30:35.809Z","attemptedAt":"2026-11-09T08:30:35.809Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T08:30:35.258Z","attemptedAt":"2026-11-09T08:30:35.258Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2025-71321","url":"https://www.first.org/epss/","probability":0.00824,"percentile":0.57607,"date":"2026-11-08","checkedAt":"2026-11-09T08:30:35.258Z"},{"source":"NVD","id":"CVE-2025-71321","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71321","modified":"2026-10-12T22:10:00.247","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-09T08:30:35.531Z"},{"source":"NVD","id":"CVE-2025-71321","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71321","modified":"2026-10-12T22:10:00.247","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-09T08:30:35.531Z"},{"source":"GitHub Advisory Database","id":"GHSA-m273-6v24-x4m4","url":"https://github.com/advisories/GHSA-m273-6v24-x4m4","modified":"2026-06-18T14:44:27Z","checkedAt":"2026-11-09T08:30:35.531Z"},{"source":"ENISA EUVD","id":"EUVD-2025-210268","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210268","modified":"Nov 8, 2026, 2:00:23 PM","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","checkedAt":"2026-11-09T08:30:35.809Z"}],"aiSummary":{"text":"picklescan before 0.0.33 has an arbitrary file writing vulnerability via distutils, allowing attackers to bypass blocklists and potentially overwrite system files. The weakness is deserialization of untrusted data. Impact may include denial of service.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-08T16:56:08.532Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2025-71321"}]}}