---
id: CVE-2025-71378
title: >-
  picklescan before 0.0.30 fails to detect cProfile.runctx function calls in
  pickle file reduce methods, allowing attackers to execute arbitrary code
summary: >-
  picklescan before 0.0.30 fails to detect cProfile.runctx function calls in
  pickle file reduce methods, allowing attackers to execute arbitrary code.
  Malicious pickle files bypass picklescan detection and execute remote code
  when loaded v…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'
cwe:
  - CWE-502
vendor: mmaitre314
product: picklescan
affected:
  - picklescan < 0.0.30
patched:
  - picklescan 0.0.30
published: '2026-06-21'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T22:10:00.247'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71378'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9w88-8rmg-7g2p
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-undetected-cprofile-runctx-in-pickle-files
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9w88-8rmg-7g2p
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://github.com/mmaitre314/picklescan/commit/1931c2d04eaca8d20597705ff39cab78ba364e4b
  - url: 'https://github.com/mmaitre314/picklescan'
  - url: >-
      https://github.com/pypa/advisory-database/tree/main/vulns/picklescan/PYSEC-2026-247.yaml
  - url: 'https://github.com/advisories/GHSA-9w88-8rmg-7g2p'
tags:
  - nvd
  - osv
  - pip
  - ghsa
epss: 0.0048
epssPercentile: 0.41541
aliases:
  - GHSA-9w88-8rmg-7g2p
  - PYSEC-2026-247
ecosystem: pip
ingestedAt: '2026-09-11T19:57:09.310Z'
---

## Overview

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load().

## Affected

- `picklescan < 0.0.30`

## Remediation

Upgrade past the affected range:

- `picklescan 0.0.30`

## Package advisory (CVE-2025-71378)

Affected packages:

- `picklescan < 0.0.30`

Patched in:

- `picklescan 0.0.30`

Source: https://osv.dev/vulnerability/GHSA-9w88-8rmg-7g2p