CVE-2025-71366 HIGH

CVE-2025-71366: picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile

Vendor Picklescan
Product picklescan
Weakness CWE-502 · Unsafe deserialization
Published July 4, 2026
Last update July 4, 2026
View on NVD All CVEs

CVSS base score

7.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle files, allowing attackers to bypass safety checks. Remote attackers can embed undetected code in pickle files to achieve arbitrary code execution when victims load the files.

Key dates

02Disclosure timeline

July 4, 2026 CVE published

Related vulnerabilities

04Related CVE

CVE-2026-13759 IBM WebSphere eXtreme Scale is affected by Insecure Deserilization CVE-2026-12787 zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testConnection Endpoint deserialization CVE-2026-49765 WordPress Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms plugin <= 1.1.8 - PHP Object Injection vulnerability CVE-2025-71375 picklescan - Undetected Remote Code Execution via _operator.methodcaller CVE-2026-56121 Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization