CVE-2025-10156 — Vulnerability in picklescan — CVE Details

CRITICAL

Published September 17, 2025Updated May 20, 2026Source: osv

Summary

An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check (CRC), which causes the scanner to halt and fail to analyze the contents for malicious pickle files. When the file incorrectly considered safe is loaded, it can lead to the execution of malicious code.

Advisory Timeline

First published September 17, 2025 (390 days ago).
Last revised May 20, 2026 — 245 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

pip

Update picklescan to 0.0.31 or later

pip install "picklescan>=0.0.31"

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

Affects 1 ecosystem: pypi (1).

Package	Ecosystem	Affected	Fixed In
picklescan	pypi	0.0.1, 0.0.10, 0.0.11, 0.0.12 (+26 more)	0.0.31

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.8 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Frequently Asked Questions

What is CVE-2025-10156?: This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.8/10).
How do I check if my project is affected by CVE-2025-10156?: CVE-2025-10156 affects picklescan. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2025-10156 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

9.8

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

PYSEC-2025-152

GHSA-mjqp-26hc-grxg

Related CVEs

CVE-2026-53873
CRITICAL
PickleScan's profile.run blocklist mismatch allows exec() bypass
CVE-2026-56315
CRITICAL
PickleScan has multiple stdlib modules with direct RCE not in blocklist
CVE-2025-71323
HIGH
Picklescan does not block ctypes
CVE-2025-71367
HIGH
Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.attrgetter
CVE-2025-71320
HIGH
Picklescan has Incomplete List of Disallowed Inputs
CVE-2025-71375
HIGH
Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.methodcaller
CVE-2025-71325
HIGH
Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass
CVE-2026-53874
HIGH
picklescan missing detection by simple obfuscation of a `builtins.eval` call

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies