CVE-2025-71342 picklescan CVE debrief

Who should care

Organizations using picklescan in their PyTorch models and supply chain should be aware of this vulnerability. The vulnerability can be exploited remotely, and attackers can execute arbitrary code on the affected systems. defenders should prioritize patching or mitigating this vulnerability to prevent potential attacks.

Technical summary

The vulnerability exists in the picklescan library, specifically in its handling of pickle files. The library fails to detect malicious pickle files that use idlelib.run.Executive.runcode in reduce methods. This allows attackers to embed undetected code in pickle files that executes during pickle.load, enabling remote code execution in PyTorch models and supply chain attacks. The vulnerability is caused by the library's incomplete validation of pickle files.

Defensive priority

High priority should be given to patching or mitigating this vulnerability. defenders should update picklescan to version 0.0.30 or later to fix the vulnerability.

Recommended defensive actions

• Update picklescan to version 0.0.30 or later
• Restrict access to pickle files to prevent unauthorized modifications
• Implement additional validation and sanitization of pickle files
• Monitor systems for suspicious activity related to pickle files
• Consider using alternative libraries or technologies that are not vulnerable to this issue

Evidence notes

The CVE record was published on 2026-07-04T02:16:21.387Z and has not been modified since then. The vulnerability has a CVSS score of 7.6 and is classified as HIGH. Limited information is available about the affected products and versions. The vendor and product names are not specified in the CVE record.

Official resources