CVE-2025-71345 HIGH

CVE-2025-71345: picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_prof

Vendor Picklescan
Product picklescan
Weakness CWE-502 · Unsafe deserialization
Published July 4, 2026
Last update July 4, 2026
View on NVD All CVEs

CVSS base score

7.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

picklescan before 0.0.30 fails to detect malicious pickle files that invoke torch.utils.bottleneck.__main__.run_autograd_prof function. Attackers can embed undetected code in pickle files that executes during deserialization, enabling remote code execution.

Key dates

02Disclosure timeline

July 4, 2026 CVE published

Related vulnerabilities

04Related CVE

CVE-2026-58025 Remote Code Execution via Unsafe Deserialization in LogItem Import CVE-2026-46386 OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default `SECRET_KEY_BASE=OVERWRITE_ME` and `cookies_serializer = :marshal` CVE-2025-71342 picklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcode CVE-2026-27414 WordPress Werkstatt theme <= 4.8.3 - PHP Object Injection vulnerability CVE-2026-12115 Counter Box <= 2.0.13 - Authenticated (Administrator+) PHP Object Injection via Import