---
id: CVE-2025-71351
title: >-
  picklescan before 0.0.25 fails to detect malicious pickle files that use
  timeit.timeit() in the __reduce__ method, allowing remote code execution
summary: >-
  picklescan before 0.0.25 fails to detect malicious pickle files that use
  timeit.timeit() in the __reduce__ method, allowing remote code execution.
  Attackers can craft pickle files that import dangerous libraries like os and
  execute arbit…
severity: medium
cwe:
  - CWE-184
vendor: picklescan
product: picklescan
affected:
  - picklescan < 0.0.25
patched:
  - picklescan 0.0.25
published: '2026-06-21'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T22:10:00.247'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71351'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-v7x6-rv5q-mhwc
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-timeit-timeit-detection-bypass
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-v7x6-rv5q-mhwc
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71351'
  - url: 'https://github.com/mmaitre314/picklescan/pull/40'
  - url: 'https://github.com/mmaitre314/picklescan'
  - url: 'https://github.com/mmaitre314/picklescan/releases/tag/v0.0.25'
  - url: 'https://github.com/advisories/GHSA-v7x6-rv5q-mhwc'
  - url: 'https://pypi.org/project/picklescan'
tags:
  - nvd
  - osv
  - pip
  - ghsa
epss: 0.00552
epssPercentile: 0.45966
aliases:
  - GHSA-v7x6-rv5q-mhwc
  - PYSEC-2026-4135
ecosystem: pip
ingestedAt: '2026-07-08T18:25:53.268Z'
---

## Overview

picklescan before 0.0.25 fails to detect malicious pickle files that use timeit.timeit() in the __reduce__ method, allowing remote code execution. Attackers can craft pickle files that import dangerous libraries like os and execute arbitrary system commands, which evade picklescan detection and execute when pickle.load() is called.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2025-71351)

Affected packages:

- `picklescan < 0.0.25`

Patched in:

- `picklescan 0.0.25`

Source: https://osv.dev/vulnerability/GHSA-v7x6-rv5q-mhwc