The vulnerability stems from unsafe deserialization of Python pickle objects in picklescan prior to version 1.0.1. An unauthenticated attacker can send a crafted pickle payload that exploits the logging.FileHandler class constructor. This enables the creation of zero‑byte files such as lock files or other filesystem artifacts. The impact is the disruption of application functionality or denial of service through the manipulation of critical files, consistent with CWE‑502.

Picklescan manually distributed by mmaitre314. Versions earlier than 1.0.1 are affected. The specific software identified by the CNA is picklescan:picklescan.

The CVSS score is 6.9, indicating a moderate severity. EPSS is not available and the vulnerability is not listed in the CISA KEV catalog. Attackers require only the ability to supply a pickle payload to the application, which is generally feasible from an unauthenticated standpoint. There is no mention of remote code execution or elevated privileges, but the ability to create arbitrary filesystem objects poses a significant operational risk.