CVE-2025-46417 Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate

What is CVE-2025-46417?

CVE-2025-46417 is a medium-severity unsafe deserialization vulnerability in Picklescan, published on 24 Apr 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

The unsafe globals in Picklescan before 0.0.25 do not include ssl. Consequently, ssl.get_server_certificate can exfiltrate data via DNS after deserialization.

Weakness: CWE-184

Which versions are affected by CVE-2025-46417?

3 open source packages ship an affected version, including picklescan. It affects 1 product.

Products include Mmaitre314 Picklescan.

How do I fix CVE-2025-46417?

Upgrade picklescan to 0.0.25 or later.

Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.

Is CVE-2025-46417 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-46417 exists.

Other vulnerabilities in Picklescan

• CVE-2025-10155 PickleScan Security Bypass Using Misleading File Extension Critical 9.3
• CVE-2025-10156 PickleScan Security Bypass via Bad CRC in ZIP Archive Critical 9.3
• CVE-2025-10157 PickleScan Bypasses Unsafe Globals Check Using Submodule Imports Critical 9.3
• CVE-2025-71348 picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass High 7.6
• CVE-2025-71357 picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommand High 7.6

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-93mv-x874-956g, PYSEC-2025-34.