CVE-2025-71378 picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files

What is CVE-2025-71378?

CVE-2025-71378 is a high-severity unsafe deserialization vulnerability in picklescan, published on 21 Jun 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load().

Weakness: CWE-502

Which versions are affected by CVE-2025-71378?

3 open source packages ship an affected version, including picklescan. It affects 1 product.

Products include Mmaitre314 Picklescan.

How do I fix CVE-2025-71378?

Upgrade picklescan to 0.0.30 or later.

Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.

Is CVE-2025-71378 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-71378 exists.

Other vulnerabilities in picklescan

• CVE-2025-10155 PickleScan Security Bypass Using Misleading File Extension Critical 9.3
• CVE-2025-10156 PickleScan Security Bypass via Bad CRC in ZIP Archive Critical 9.3
• CVE-2025-10157 PickleScan Bypasses Unsafe Globals Check Using Submodule Imports Critical 9.3
• CVE-2025-71348 picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass High 7.6
• CVE-2025-71357 picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommand High 7.6

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-9w88-8rmg-7g2p, PYSEC-2026-247.