---
id: CVE-2025-71323
title: >-
  picklescan before 0.0.33 fails to block the ctypes module, allowing attackers
  to achieve remote code execution by invoking direct syscalls and accessing raw
  memory
summary: >-
  picklescan before 0.0.33 fails to block the ctypes module, allowing attackers
  to achieve remote code execution by invoking direct syscalls and accessing raw
  memory. Attackers can craft malicious pickle files using ctypes.WinDLL to load
  k…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-184
vendor: picklescan
product: picklescan
affected:
  - picklescan < 0.0.33
patched:
  - picklescan 0.0.33
published: '2026-06-17'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T22:10:00.247'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71323'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-4675-36f9-wf6r
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-unblocked-ctypes-module
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-4675-36f9-wf6r
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71323'
  - url: 'https://github.com/mmaitre314/picklescan/pull/53'
  - url: >-
      https://github.com/mmaitre314/picklescan/commit/70c1c6c31beb6baaf52c8db1b6c3c0e84a6f9dab
  - url: 'https://github.com/mmaitre314/picklescan'
  - url: 'https://github.com/mmaitre314/picklescan/releases/tag/v0.0.33'
tags:
  - nvd
  - osv
  - pip
epss: 0.00991
epssPercentile: 0.62649
aliases:
  - GHSA-4675-36f9-wf6r
  - PYSEC-2026-1782
ecosystem: pip
ingestedAt: '2026-07-08T18:25:45.262Z'
---

## Overview

picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking direct syscalls and accessing raw memory. Attackers can craft malicious pickle files using ctypes.WinDLL to load kernel32.dll and execute arbitrary commands, bypassing sandbox protections and gadget chain detection.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2025-71323)

Affected packages:

- `picklescan < 0.0.33`

Patched in:

- `picklescan 0.0.33`

Source: https://osv.dev/vulnerability/GHSA-4675-36f9-wf6r