CVE-2025-71365

7.6 highEPSS 0.4%

picklescan before 0.0.33 fails to detect malicious pickle files that invoke numpy.f2py.crackfortran.myeval function through the reduce method. Attackers can craft malicious pickle files embedding arbitrary code that evades picklescan detection and executes remote code when loaded.

CVSS 4.0: 7.6CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
CVSS 3.1: 8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-25)
CWE: CWE-502
Published: 2026-06-23
Modified: 2026-10-12
Record from: the NVD, synced 2026-10-19

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-3329-ghmp-jmv5	PyPI	picklescan	<0.0.33	0.0.33
PYSEC-2026-4131	PyPI	picklescan	<0.0.33	0.0.33

References

https://github.com/mmaitre314/picklescan/security/advisories/GHSA-3329-ghmp-jmv5
https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-numpy-f2py-crackfortran-myeval-detection-bypass
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-3329-ghmp-jmv5

Check your stack JSON