CVE-2025-71323

critical · 9.3

picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking direct syscalls and accessing raw memory. Attackers can craft malicious pickle files using ctypes.WinDLL to load kernel32.dll and execute arbitrary commands, bypassing sandbox protections and gadget chain detection.

9.3

CVSS

0.8%

EPSS (exploit prob.)

54th

EPSS percentile

2026-06-17

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-184

References

https://github.com/mmaitre314/picklescan/security/advisories/GHSA-4675-36f9-wf6r
https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-unblocked-ctypes-module
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-4675-36f9-wf6r

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-71323