---
id: CVE-2025-71341
title: >-
  picklescan before 0.0.29 fails to detect the profile.Profile.runctx function
  when analyzing pickle files, allowing attackers to embed undetected malicious
  code
summary: >-
  picklescan before 0.0.29 fails to detect the profile.Profile.runctx function
  when analyzing pickle files, allowing attackers to embed undetected malicious
  code. Remote attackers can craft malicious pickle files using
  profile.Profile.runc…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'
cwe:
  - CWE-502
vendor: picklescan
product: picklescan
affected:
  - picklescan < 0.0.29
patched:
  - picklescan 0.0.29
published: '2026-06-23'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T21:10:00.227'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71341'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-6vqj-c2q5-j97w
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-undetected-profile-profile-runctx
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-6vqj-c2q5-j97w
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71341'
  - url: >-
      https://github.com/mmaitre314/picklescan/commit/aecd11be98702caa9ba9b12189d91ad596a36114
  - url: 'https://github.com/mmaitre314/picklescan'
  - url: 'https://github.com/advisories/GHSA-6vqj-c2q5-j97w'
  - url: 'https://pypi.org/project/picklescan'
tags:
  - nvd
  - osv
  - pip
  - ghsa
epss: 0.00582
epssPercentile: 0.47619
aliases:
  - GHSA-6vqj-c2q5-j97w
  - PYSEC-2026-4132
ecosystem: pip
ingestedAt: '2026-07-08T18:25:46.536Z'
---

## Overview

picklescan before 0.0.29 fails to detect the profile.Profile.runctx function when analyzing pickle files, allowing attackers to embed undetected malicious code. Remote attackers can craft malicious pickle files using profile.Profile.runctx in the reduce method to achieve remote code execution when the pickle file is loaded.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2025-71341)

Affected packages:

- `picklescan < 0.0.29`

Patched in:

- `picklescan 0.0.29`

Source: https://osv.dev/vulnerability/GHSA-6vqj-c2q5-j97w