CVE-2026-56304

picklescan - Arbitrary File Creation via logging.FileHandler Deserialization

Published Jun 20, 2026 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Description

picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.FileHandler class instantiation. Attackers can exploit this by crafting malicious pickle payloads to bypass RCE blocklists and create lock files or other filesystem artifacts, potentially causing denial of service or application disruption.

Analysis

Technical impact

The vulnerability stems from unsafe deserialization of Python pickle objects in picklescan prior to version 1.0.1. An unauthenticated attacker can send a crafted pickle payload that exploits the logging.FileHandler class constructor. This enables the creation of zero‑byte files such as lock files or other filesystem artifacts. The impact is the disruption of application functionality or denial of service through the manipulation of critical files, consistent with CWE‑502.

Affected Systems

Picklescan manually distributed by mmaitre314. Versions earlier than 1.0.1 are affected. The specific software identified by the CNA is picklescan:picklescan.

Risk and Exploitability

The CVSS score is 6.9, indicating a moderate severity. EPSS is not available and the vulnerability is not listed in the CISA KEV catalog. Attackers require only the ability to supply a pickle payload to the application, which is generally feasible from an unauthenticated standpoint. There is no mention of remote code execution or elevated privileges, but the ability to create arbitrary filesystem objects poses a significant operational risk.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

picklescan

unaffected

Version	Status	Constraints
`0`	affected	< 1.0.1
`1.0.1`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:mmaitre314:picklescan:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Mmaitre314

Picklescan

Version	Status	Scheme	Platform
`[0,1.0.1)`	affected	semver	—
`1.0.1`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update picklescan to version 1.0.1 or later, which removes the vulnerable deserialization path.
Audit application code to ensure untrusted pickle data is no longer processed; consider replacing logging.FileHandler with a secure logging implementation.
After patching, monitor the filesystem for any abnormal file creation events and verify that the application functions correctly.

Generated by OpenCVE AI on June 20, 2026 at 17:21 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.443% probability within 30 days)

Exploitation poc

Automatable yes

Technical Impact partial

References

Link	Providers
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-m7j5-r2p5-c39r
https://www.vulncheck.com/advisories/picklescan-arbitrary-file-creation-via-logging-filehandler-deserialization

History

Jun 24, 2026 6:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Jun 20, 2026 4:15 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		picklescan before 1.0.1 contains an unsafe pickle deserialization vulnerability allowing unauthenticated attackers to create arbitrary zero-byte files via logging.FileHandler class instantiation. Attackers can exploit this by crafting malicious pickle payloads to bypass RCE blocklists and create lock files or other filesystem artifacts, potentially causing denial of service or application disruption.
Title		picklescan - Arbitrary File Creation via logging.FileHandler Deserialization
First Time appeared		Mmaitre314 Mmaitre314 picklescan
Weaknesses		CWE-502
CPEs		cpe:2.3:a:mmaitre314:picklescan::::::::
Vendors & Products		Mmaitre314 Mmaitre314 picklescan
References		https://github.com/mmaitre314/picklescan/security/advisories/GHSA-m7j5-r2p5-c39r https://www.vulncheck.com/advisories/picklescan-arbitrary-file-creation-via-logging-filehandler-deserialization
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L'}` cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N'}`