---
id: CVE-2025-71322
title: >-
  PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe
  globals list, allowing attackers to bypass security checks
summary: >-
  PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe
  globals list, allowing attackers to bypass security checks. Malicious actors
  can craft pickle payloads using pty.spawn to achieve arbitrary code execution
  whe…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-693
vendor: picklescan
product: picklescan
affected:
  - picklescan < 0.0.33
patched:
  - picklescan 0.0.33
published: '2026-06-17'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T22:10:00.247'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71322'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-hgrh-qx5j-jfwx
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-unsafe-globals-check-bypass-via-pty-spawn-function
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-hgrh-qx5j-jfwx
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71322'
  - url: 'https://github.com/mmaitre314/picklescan/pull/53'
  - url: >-
      https://github.com/mmaitre314/picklescan/commit/70c1c6c31beb6baaf52c8db1b6c3c0e84a6f9dab
  - url: 'https://github.com/mmaitre314/picklescan'
  - url: 'https://github.com/mmaitre314/picklescan/releases/tag/v0.0.33'
tags:
  - nvd
  - osv
  - pip
epss: 0.00384
epssPercentile: 0.32256
aliases:
  - GHSA-hgrh-qx5j-jfwx
  - PYSEC-2026-1790
ecosystem: pip
ingestedAt: '2026-07-08T18:25:50.231Z'
---

## Overview

PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypass security checks. Malicious actors can craft pickle payloads using pty.spawn to achieve arbitrary code execution when files are processed by PickleScan.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2025-71322)

Affected packages:

- `picklescan < 0.0.33`

Patched in:

- `picklescan 0.0.33`

Source: https://osv.dev/vulnerability/GHSA-hgrh-qx5j-jfwx