CVE-2026-56315 picklescan - Remote Code Execution via Unblocked Standard Library Modules
Attackers can achieve remote code execution by crafting malicious pickle files that bypass picklescan's validation using unblocked standard library modules.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-56315?
CVE-2026-56315 is a critical code injection vulnerability in picklescan, published on 23 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
picklescan before 1.0.4 fails to block at least seven Python standard library modules (including uuid, _osx_support, _aix_support, _pyrepl.pager, and imaplib) exposing eight functions that provide direct arbitrary command execution. Attackers can craft malicious pickle files importing these unblocked modules to achieve remote code execution while bypassing picklescan's safety validation entirely.
Weakness: CWE-184
Which versions are affected by CVE-2026-56315?
3 open source packages ship an affected version, including picklescan.
| Package | Affected | Fixed in |
|---|---|---|
picklescan PyPI | All versions | 1.0.4 |
picklescan PyPI | All versions | 1.0.4 |
picklescan PyPI | All versions | 1.0.4 |
How do I fix CVE-2026-56315?
Upgrade picklescan to 1.0.4 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-56315 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-56315 exists.
Sources
Also known as GHSA-g38g-8gr9-h9xp, PYSEC-2026-4134.