{"id":"CVE-2025-71378","aliases":[],"cve":{"records":[{"id":"CVE-2025-71378","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-06-20T13:11:44.728Z","published":"2026-06-21T13:26:50.106Z","modified":"2026-11-08T14:00:31.035Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-11-08T14:00:31.035Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-06-23T02:46:13.773Z"}],"references":[{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9w88-8rmg-7g2p","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-undetected-cprofile-runctx-in-pickle-files","tags":["third-party-advisory"],"source":"VulnCheck"},{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9w88-8rmg-7g2p","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-502","description":"Deserialization of Untrusted Data","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mmaitre314:picklescan:*:*:*:*:*:*:*:*","versionEndExcluding":"0.0.30"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-06-23T02:45:43.134054Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load().","score":8.1,"severity":"high","published":"2026-06-21T13:26:50.106Z","modified":"2026-11-08T14:00:31.035Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"picklescan","name":"picklescan","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"0.0.30","versionType":"semver"},{"version":"0.0.30","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:pypi/picklescan","packageIdentity":{"ecosystem":"PyPI","name":"picklescan"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2025-71378"}],"remediation":[],"references":["https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9w88-8rmg-7g2p","https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-undetected-cprofile-runctx-in-pickle-files"],"sources":[{"name":"CVE","id":"CVE-2025-71378","modified":"2026-11-08T14:00:31.035Z","url":"https://www.cve.org/CVERecord?id=CVE-2025-71378"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","score":7.6},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","score":8.1}],"sourceAffected":[],"observedAt":"2026-11-08T14:07:08.517Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:30:31.194Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T08:15:37.691Z","attemptedAt":"2026-11-09T08:15:37.691Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T08:15:37.383Z","attemptedAt":"2026-11-09T08:15:37.383Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T08:15:37.389Z","attemptedAt":"2026-11-09T08:15:37.389Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T08:15:37.386Z","attemptedAt":"2026-11-09T08:15:37.386Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-9w88-8rmg-7g2p","url":"https://github.com/advisories/GHSA-9w88-8rmg-7g2p","modified":"2026-09-11T19:21:31Z","checkedAt":"2026-11-09T08:15:37.383Z"},{"source":"FIRST EPSS","id":"CVE-2025-71378","url":"https://www.first.org/epss/","probability":0.0048,"percentile":0.41683,"date":"2026-11-08","checkedAt":"2026-11-09T08:15:37.386Z"},{"source":"ENISA EUVD","id":"EUVD-2025-210294","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210294","modified":"Nov 8, 2026, 2:00:31 PM","score":7.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","checkedAt":"2026-11-09T08:15:37.389Z"},{"source":"NVD","id":"CVE-2025-71378","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71378","modified":"2026-10-12T22:10:00.247","score":7.6,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-09T08:15:37.691Z"},{"source":"NVD","id":"CVE-2025-71378","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71378","modified":"2026-10-12T22:10:00.247","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","checkedAt":"2026-11-09T08:15:37.691Z"},{"source":"NVD","id":"CVE-2025-71378","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71378","modified":"2026-10-12T22:10:00.247","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","checkedAt":"2026-11-09T08:15:37.691Z"}],"aiSummary":{"text":"picklescan before 0.0.30 may allow code execution via undetected cProfile.runctx in pickle files. Attackers can bypass detection with malicious pickle files. Impact occurs when loaded via pickle.load().","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-08T14:16:08.650Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2025-71378"}]}}