---
id: CVE-2025-71347
title: >-
  picklescan before 0.0.33 fails to detect malicious pickle files using
  numpy.f2py.crackfortran.param_eval function in reduce methods, allowing
  attackers to bypass security checks
summary: >-
  picklescan before 0.0.33 fails to detect malicious pickle files using
  numpy.f2py.crackfortran.param_eval function in reduce methods, allowing
  attackers to bypass security checks. Remote attackers can embed undetected
  code in pickle files…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'
cwe:
  - CWE-502
published: '2026-07-04'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T21:10:00.227'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71347'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-cffc-mxrf-mhh4
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-undetected-remote-code-execution-via-numpy-f2py-crackfortran-param-eval
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-cffc-mxrf-mhh4
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00564
epssPercentile: 0.46715
ingestedAt: '2026-07-04T21:57:46.832Z'
---

## Overview

picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.param_eval function in reduce methods, allowing attackers to bypass security checks. Remote attackers can embed undetected code in pickle files that executes during deserialization, enabling arbitrary code execution in applications loading untrusted pickle data.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.