---
id: CVE-2025-71340
title: >-
  picklescan through 0.0.26 fails to detect malicious pickle files that invoke
  idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods
summary: >-
  picklescan through 0.0.26 fails to detect malicious pickle files that invoke
  idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers
  can embed undetected code in pickle files that executes arbitrary commands
  when the…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'
cwe:
  - CWE-502
vendor: picklescan
product: picklescan
affected:
  - picklescan < 0.0.30
patched:
  - picklescan 0.0.30
published: '2026-06-25'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T21:10:00.227'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71340'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-3gf5-cxq9-w223
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-idlelib-pyshell-modifiedinterpreter-runcode
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-3gf5-cxq9-w223
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://github.com/mmaitre314/picklescan/commit/1931c2d04eaca8d20597705ff39cab78ba364e4b
  - url: 'https://github.com/mmaitre314/picklescan'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71340'
  - url: 'https://github.com/advisories/GHSA-3gf5-cxq9-w223'
tags:
  - nvd
  - osv
  - pip
  - ghsa
epss: 0.0038
epssPercentile: 0.31804
aliases:
  - GHSA-3gf5-cxq9-w223
ecosystem: pip
ingestedAt: '2026-07-08T18:25:44.904Z'
---

## Overview

picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers can embed undetected code in pickle files that executes arbitrary commands when the file is loaded via pickle.load(), enabling supply chain attacks on PyTorch models and saved Python objects. This is fixed in version 0.0.30.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2025-71340)

Affected packages:

- `picklescan < 0.0.30`

Patched in:

- `picklescan 0.0.30`

Source: https://osv.dev/vulnerability/GHSA-3gf5-cxq9-w223