The vulnerability resides in functions that overlook a dangerous blocklist by leveraging the distutils.file_util.write_file method. An attacker can craft malicious pickle payloads to force the application to overwrite arbitrary files on the host, potentially destroying critical system files or installing malicious code. This flaw is a classic unsafe serialization issue and enables confidentiality, integrity, and availability compromise, including potential remote code execution.

Picklescan, version 0.0.32 and earlier. The package prior to 0.0.33 contains the vulnerability; upgrades to 0.0.33 or later eliminate the affected code path.

The CVSS score of 9.3 places the flaw in the HIGH severity range, but its EPSS score of less than 1% indicates a low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector involves the attacker sending a specially crafted pickle file to the vulnerable application, which then uses distutils.file_util.write_file to overwrite a target file, enabling denial of service or remote code execution. No additional conditions are mentioned, suggesting that authenticated or unauthenticated access to the deserialization endpoint would be sufficient if it exists.