CVE-2026-53873

critical · 9.3

picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level profile.run() function, allowing attackers to achieve arbitrary code execution via exec(). Attackers can craft malicious pickle files calling profile.run(statement) to execute arbitrary Python code while picklescan reports zero security issues.

9.3

CVSS

0.5%

EPSS (exploit prob.)

39th

EPSS percentile

2026-06-17

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-184

References

https://github.com/mmaitre314/picklescan/security/advisories/GHSA-7wx9-6375-f5wh
https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-profile-run-blocklist-bypass
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-7wx9-6375-f5wh

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-53873