CVE-2025-71355: Picklescan

High severity, CVSS 7.6. EPSS: 0.6% chance of exploitation in the next 30 days.

Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy.testing._private.utils.runstring within the reduce method to import dangerous libraries like os and execute arbitrary OS commands when the pickle file is loaded.

Affected products

• Picklescan Picklescan: before 0.0.25 (fixed in 0.0.25)

Published 2026-06-30. Last modified 2026-10-05.