{"id":"CVE-2026-3490","aliases":[],"cve":{"records":[{"id":"CVE-2026-3490","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-03-03T16:11:38.661Z","published":"2026-06-17T15:05:01.522Z","modified":"2026-11-08T14:02:10.852Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-11-08T14:02:10.852Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-06-18T15:23:36.077Z"}],"references":[{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vvpj-8cmc-gx39","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/picklescan-universal-blocklist-bypass-via-pkgutil-resolve-name","tags":["third-party-advisory"],"source":"VulnCheck"},{"url":"https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vvpj-8cmc-gx39","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-183","description":"Permissive List of Allowed Inputs","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mmaitre314:picklescan:*:*:*:*:*:*:*:*","versionEndExcluding":"1.0.4"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-06-18T15:20:40.069385Z","decisions":[{"name":"Exploitation","value":"poc"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"total"}]}]},"title":"picklescan - Universal Blocklist Bypass via pkgutil.resolve_name","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE calls. Remote attackers can invoke any blocked function such as os.system, builtins.exec, or subprocess.call to achieve remote code execution.","score":10,"severity":"critical","published":"2026-06-17T15:05:01.522Z","modified":"2026-11-08T14:02:10.852Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"picklescan","name":"picklescan","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"1.0.4","versionType":"semver"},{"version":"1.0.4","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:pypi/picklescan","packageIdentity":{"ecosystem":"PyPI","name":"picklescan"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-3490"}],"remediation":[],"references":["https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vvpj-8cmc-gx39","https://www.vulncheck.com/advisories/picklescan-universal-blocklist-bypass-via-pkgutil-resolve-name"],"sources":[{"name":"CVE","id":"CVE-2026-3490","modified":"2026-11-08T14:02:10.852Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-3490"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","score":10},{"source":"VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","score":10}],"sourceAffected":[],"observedAt":"2026-11-08T14:19:00.222Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:00:33.317Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-09T05:10:41.764Z","attemptedAt":"2026-11-09T05:10:41.764Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-09T05:10:41.275Z","attemptedAt":"2026-11-09T05:10:41.275Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-09T05:10:41.177Z","attemptedAt":"2026-11-09T05:10:41.177Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-09T05:10:41.189Z","attemptedAt":"2026-11-09T05:10:41.189Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-37737","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37737","modified":"Nov 8, 2026, 2:02:10 PM","score":10,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","checkedAt":"2026-11-09T05:10:41.177Z"},{"source":"FIRST EPSS","id":"CVE-2026-3490","url":"https://www.first.org/epss/","probability":0.00823,"percentile":0.5758,"date":"2026-11-08","checkedAt":"2026-11-09T05:10:41.189Z"},{"source":"GitHub Advisory Database","id":"GHSA-vvpj-8cmc-gx39","url":"https://github.com/advisories/GHSA-vvpj-8cmc-gx39","modified":"2026-06-18T14:45:32Z","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-11-09T05:10:41.275Z"},{"source":"NVD","id":"CVE-2026-3490","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3490","modified":"2026-10-26T11:10:00.157","score":10,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-09T05:10:41.764Z"},{"source":"NVD","id":"CVE-2026-3490","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3490","modified":"2026-10-26T11:10:00.157","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","checkedAt":"2026-11-09T05:10:41.764Z"}],"aiSummary":{"text":"picklescan before 1.0.4 has a blocklist bypass vulnerability via pkgutil.resolve_name, potentially allowing remote attackers to invoke blocked functions. The weakness is due to a permissive list of allowed inputs. The stated impact is remote code execution.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-08T16:36:02.382Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-3490"}]}}