CVE-2025-71344

Name of the Vulnerable Software and Affected Versions picklescan versions 0.0.26 and earlier

Description The software fails to detect the ensurepip. run pip built-in function when scanning pickle files. Attackers can craft malicious pickle files by embedding calls to ensurepip. run pip within reduce methods, allowing them to bypass detection. When a user invokes pickle.load() on such a file after it has been incorrectly flagged as safe, it can lead to remote code execution. This issue impacts organizations or individuals using the tool to detect malicious pickle files within PyTorch models, potentially enabling supply chain attacks through infected ML models, APIs, or saved Python objects.

Recommendations Update to version 0.0.30 or later.