CVE-2026-56315

picklescan - Remote Code Execution via Unblocked Standard Library Modules

Published Jun 23, 2026 CVSS 4.0 · 9.3 Critical EPSS 1.1% KEV · Not listed

Description

picklescan before 1.0.4 fails to block at least seven Python standard library modules (including uuid, _osx_support, _aix_support, _pyrepl.pager, and imaplib) exposing eight functions that provide direct arbitrary command execution. Attackers can craft malicious pickle files importing these unblocked modules to achieve remote code execution while bypassing picklescan's safety validation entirely.

Analysis

Technical impact

picklescan before 1.0.4 does not block at least seven Python standard library modules, exposing eight functions that allow arbitrary command execution; attackers can craft malicious pickle files that import these unblocked modules, achieving remote code execution while bypassing picklescan's safety validation entirely. This flaw is classified as CWE-184, representing an unrestricted reading of data that leads to code injection.

Affected Systems

The vulnerability affects picklescan by picklescan, specifically all versions older than 1.0.4. Systems running these earlier releases are exposed to user-supplied pickle deserialization that can execute arbitrary code.

Risk and Exploitability

The CVSS score is 9.3, indicating critical severity; EPSS information is currently unavailable, so the exact exploit likelihood is uncertain, and the vulnerability is not listed in the CISA KEV catalog. The attack vector involves sending crafted pickle payloads that import unblocked standard library modules, enabling remote code execution without triggering any safety checks. Because picklescan performs no additional validation, any process that calls picklescan with untrusted data is a potential entry point for exploitation.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

picklescan

unaffected

Version	Status	Constraints
`0`	affected	< 1.0.4
`1.0.4`	unaffected	—

No data.

Vendor Product Versions

Mmaitre314

Picklescan

Version	Status	Scheme	Platform
`[0,*]`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update picklescan to version 1.0.4 or later, which blocks the identified standard library modules and removes the execution vector.
If an immediate upgrade is not possible, refactor the application to eliminate unsafe pickle deserialization or enforce a strict whitelist that excludes the problematic modules.
Audit all code paths that import or load picklescan and verify that no untrusted pickle data is processed; consider using safer serialization methods such as JSON or protocol buffers where possible.

Generated by OpenCVE AI on June 23, 2026 at 13:24 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-g38g-8gr9-h9xp	PickleScan has multiple stdlib modules with direct RCE not in blocklist

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: 1.1% (1.147% probability within 30 days)

Exploitation poc

Automatable yes

Technical Impact total

References

Link	Providers
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-g38g-8gr9-h9xp
https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-unblocked-standard-library-modules

History

Jun 23, 2026 2:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jun 23, 2026 12:45 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		picklescan before 1.0.4 fails to block at least seven Python standard library modules (including uuid, _osx_support, _aix_support, _pyrepl.pager, and imaplib) exposing eight functions that provide direct arbitrary command execution. Attackers can craft malicious pickle files importing these unblocked modules to achieve remote code execution while bypassing picklescan's safety validation entirely.
Title		picklescan - Remote Code Execution via Unblocked Standard Library Modules
First Time appeared		Mmaitre314 Mmaitre314 picklescan
Weaknesses		CWE-184
CPEs		cpe:2.3:a:mmaitre314:picklescan::::::::
Vendors & Products		Mmaitre314 Mmaitre314 picklescan
References		https://github.com/mmaitre314/picklescan/security/advisories/GHSA-g38g-8gr9-h9xp https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-unblocked-standard-library-modules
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`