CVE-2025-71323 picklescan - Remote Code Execution via Unblocked ctypes Module
Attackers can achieve remote code execution by crafting malicious pickle files that bypass picklescan's blocklist via the ctypes module.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-71323?
CVE-2025-71323 is a critical code injection vulnerability in picklescan, published on 17 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking direct syscalls and accessing raw memory. Attackers can craft malicious pickle files using ctypes.WinDLL to load kernel32.dll and execute arbitrary commands, bypassing sandbox protections and gadget chain detection.
Weakness: CWE-184
Which versions are affected by CVE-2025-71323?
3 open source packages ship an affected version, including picklescan.
| Package | Affected | Fixed in |
|---|---|---|
picklescan PyPI | All versions | 0.0.33 |
picklescan PyPI | All versions | 0.0.33 |
picklescan PyPI | All versions | 0.0.33 |
How do I fix CVE-2025-71323?
Upgrade picklescan to 0.0.33 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2025-71323 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-71323 exists.
Sources
Also known as GHSA-4675-36f9-wf6r, PYSEC-2026-1782.