---
id: CVE-2025-71365
title: >-
  picklescan before 0.0.33 fails to detect malicious pickle files that invoke
  numpy.f2py.crackfortran.myeval function through the reduce method
summary: >-
  picklescan before 0.0.33 fails to detect malicious pickle files that invoke
  numpy.f2py.crackfortran.myeval function through the reduce method. Attackers
  can craft malicious pickle files embedding arbitrary code that evades
  picklescan det…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'
cwe:
  - CWE-502
  - CWE-94
vendor: picklescan
product: picklescan
affected:
  - picklescan < 0.0.33
patched:
  - picklescan 0.0.33
published: '2026-06-23'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T21:10:00.227'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71365'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-3329-ghmp-jmv5
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-numpy-f2py-crackfortran-myeval-detection-bypass
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-3329-ghmp-jmv5
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71365'
  - url: 'https://github.com/mmaitre314/picklescan/pull/53'
  - url: >-
      https://github.com/mmaitre314/picklescan/commit/70c1c6c31beb6baaf52c8db1b6c3c0e84a6f9dab
  - url: 'https://github.com/mmaitre314/picklescan'
  - url: 'https://github.com/advisories/GHSA-3329-ghmp-jmv5'
  - url: 'https://pypi.org/project/picklescan'
tags:
  - nvd
  - osv
  - pip
  - ghsa
epss: 0.0038
epssPercentile: 0.32155
aliases:
  - GHSA-3329-ghmp-jmv5
  - PYSEC-2026-4131
ecosystem: pip
ingestedAt: '2026-07-08T18:25:44.651Z'
---

## Overview

picklescan before 0.0.33 fails to detect malicious pickle files that invoke numpy.f2py.crackfortran.myeval function through the reduce method. Attackers can craft malicious pickle files embedding arbitrary code that evades picklescan detection and executes remote code when loaded.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2025-71365)

Affected packages:

- `picklescan < 0.0.33`

Patched in:

- `picklescan 0.0.33`

Source: https://osv.dev/vulnerability/GHSA-3329-ghmp-jmv5