---
id: CVE-2025-71339
title: >-
  Picklescan before 0.0.33 fails to detect the
  numpy.f2py.crackfortran._eval_length gadget in pickle __reduce__ methods,
  allowing arbitrary code execution
summary: >-
  Picklescan before 0.0.33 fails to detect the
  numpy.f2py.crackfortran._eval_length gadget in pickle __reduce__ methods,
  allowing arbitrary code execution. Attackers can craft malicious pickle files
  that execute arbitrary Python code when …
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'
cwe:
  - CWE-502
vendor: picklescan
product: picklescan
affected:
  - picklescan < 0.0.33
patched:
  - picklescan 0.0.33
published: '2026-06-22'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T22:10:00.247'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71339'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-6556-fwc2-fg2p
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-numpy-f2py-crackfortran-eval-length-gadget
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-6556-fwc2-fg2p
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://github.com/mmaitre314/picklescan/pull/53'
  - url: >-
      https://github.com/mmaitre314/picklescan/commit/70c1c6c31beb6baaf52c8db1b6c3c0e84a6f9dab
  - url: 'https://github.com/mmaitre314/picklescan'
  - url: 'https://github.com/mmaitre314/picklescan/releases/tag/v0.0.33'
tags:
  - nvd
  - osv
  - pip
epss: 0.00381
epssPercentile: 0.31966
aliases:
  - GHSA-6556-fwc2-fg2p
  - PYSEC-2026-1783
ecosystem: pip
ingestedAt: '2026-07-08T18:25:46.286Z'
---

## Overview

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran._eval_length gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded by victims who trust Picklescan's safety validation.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2025-71339)

Affected packages:

- `picklescan < 0.0.33`

Patched in:

- `picklescan 0.0.33`

Source: https://osv.dev/vulnerability/GHSA-6556-fwc2-fg2p