CVE-2025-71321 | THREATINT

Description

picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.file_util.write_file. Attackers can construct malicious pickle objects to overwrite critical system files and achieve denial of service or remote code execution.

PUBLISHED Reserved 2026-06-08 | Published 2026-06-17 | Updated 2026-06-17 | Assigner VulnCheck

CRITICAL: 9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CRITICAL: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

Deserialization of Untrusted Data

Product status

Default status

unaffected

Any version before 0.0.33

affected

0.0.33 (semver)

unaffected

Credits

0x-Apollyon reporter

References

github.com/...lescan/security/advisories/GHSA-m273-6v24-x4m4 exploit

github.com/...lescan/security/advisories/GHSA-m273-6v24-x4m4 (GHSA Advisory GHSA-m273-6v24-x4m4) vendor-advisory

www.vulncheck.com/...ile-writing-via-distutils-module-bypass (VulnCheck Advisory: picklescan - Arbitrary File Writing via distutils Module Bypass) third-party-advisory

cve.org (CVE-2025-71321)

nvd.nist.gov (CVE-2025-71321)

Download JSON