What’s Vulnerable › Vulnerabilities

CVE-2025-10156: PickleScan Security Bypass via Bad CRC in ZIP Archive

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-09-17 · updated 2026-09-26
• Weakness: CWE-755

Description

An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check (CRC), which causes the scanner to halt and fail to analyze the contents for malicious pickle files. When the file incorrectly considered safe is loaded, it can lead to the execution of malicious code.

Affected products

• picklescan: before 0.0.31 — fixed in 0.0.31

How to fix

Upgrade to a fixed version: picklescan 0.0.31. Check the vendor advisory for mitigations.

References

• https://github.com/mmaitre314/picklescan/blob/v0.0.29/src/picklescan/relaxed_zipfile.py#L35
• https://github.com/mmaitre314/picklescan/security/advisories/GHSA-mjqp-26hc-grxg
• https://huggingface.co/jinaai/jina-embeddings-v2-base-en/resolve/main/pytorch_model.bin?download=true
• https://huggingface.co/jinaai/jina-embeddings-v2-base-en/tree/main

Get alerted when CVE-2025-10156 or the next vulnerability affects your stack