CVE-2026-53873: picklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-17 · updated 2026-06-17
Weakness: CWE-184

Description

picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level profile.run() function, allowing attackers to achieve arbitrary code execution via exec(). Attackers can craft malicious pickle files calling profile.run(statement) to execute arbitrary Python code while picklescan reports zero security issues.

Affected products

picklescan: before 1.0.4 — fixed in 1.0.4

How to fix

Upgrade to a fixed version: picklescan 1.0.4. Check the vendor advisory for mitigations.

References

https://github.com/mmaitre314/picklescan/security/advisories/GHSA-7wx9-6375-f5wh
https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-profile-run-blocklist-bypass
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-7wx9-6375-f5wh

Get alerted when CVE-2026-53873 or the next vulnerability affects your stack