Technical impact
This vulnerability arises because Picklescan fails to detect the numpy.f2py.crackfortran._eval_length gadget within pickle __reduce__ methods. As a result, an attacker can craft a malicious pickle file that will execute arbitrary Python code when the file is loaded by a user who trusts Picklescan’s safety validation. The weakness is defined as a vulnerability in the serialization mechanism (CWE‑502).
Affected Systems
The affected product is Picklescan. Versions prior to 0.0.33 are affected, including 0.0.32 and earlier. No other vendors or products are currently listed as impacted.
Risk and Exploitability
The CVSS score of 7.6 indicates high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local; the attacker needs to supply or influence the loading of a malicious pickle file, which typically requires social engineering or compromise of a trusted source. Exploitation can lead to full code execution on the victim’s machine. Given the high CVSS and the potential for local exploitation, organizations should treat this as a high‑risk issue.
Github GHSA