Picklescan versions prior to 0.0.29 do not detect malicious pickle files that use the idlelib.calltip.get_entity function in reduce operations. This deserialization flaw (CWE‑502) allows an attacker to embed arbitrary code in a pickle, which is executed with the privileges of the process that loads the file. The consequence is full remote code execution, compromising confidentiality, integrity, and availability of the affected system.

The vulnerable product is picklescan, developed by mmaitre314. All releases before 0.0.29 are impacted; no further sub‑version detail is supplied.

The CVSS score of 7.6 signals moderate to high severity, while the EPSS score of <1% indicates a low likelihood of exploitation, and the vulnerability is not listed in CISA KEV. Based on the description, the likely attack vector involves an attacker supplying or tricking a victim into loading a malicious pickle file; once deserialized, the embedded code runs with the process’s privileges, enabling arbitrary command execution.