CVE-2025-71362: picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-04 · updated 2026-10-12
Weakness: CWE-502

Description

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources.

Affected products

picklescan: before 0.0.33 — fixed in 0.0.33

How to fix

Upgrade to a fixed version: picklescan 0.0.33. Check the vendor advisory for mitigations.

References

https://github.com/mmaitre314/picklescan/security/advisories/GHSA-r8g5-cgf2-4m4m
https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-unsafe-deserialization-in-numpy-f2py-crackfortran
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-r8g5-cgf2-4m4m

Get alerted when CVE-2025-71362 or the next vulnerability affects your stack