CVE-2025-71321

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.33

Description An arbitrary file writing issue exists because the default dangerous blocklist fails to include the distutils module. While open() and shutil are blocked to prevent unauthorized file overwrites, attackers can bypass these restrictions by using the distutils.file util.write file function. By constructing malicious pickle objects, an attacker can overwrite critical system files, such as web server configurations, source code, or .ssh/authorized keys, leading to denial of service or remote code execution.

Recommendations Update to version 0.0.33 or later. As a temporary mitigation, add distutils to the blocklist to prevent the use of distutils.file util.write file.