The vulnerability exists in picklescan prior to version 0.0.25, where the library fails to detect malicious pickle files that embed a call to timeit.timeit() within their __reduce__ method. When an attacker supplies such a pickle file and the application later invokes pickle.load(), the payload imports dangerous libraries such as os and executes arbitrary system commands, resulting in remote code execution.

Affected products include the Python package picklescan maintained by mmaitre314. All releases earlier than version 0.0.25 are vulnerable, as the vulnerability description explicitly specifies this version boundary.

The CVSS score of 7.6 indicates a high level of risk; the EPSS score is not available, so exploitation probability cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that attackers would need to provide crafted pickle data to an application that trusts picklescan for validation, making the attack vector local to systems that ingest pickle files from untrusted sources.