Is CVE-2025-71344 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-71344 being exploited in the wild.

How severe is CVE-2025-71344?

High severity, with a CVSS score of 8.1, published 22 June 2026.

Which products and versions are affected?

picklescan (PyPI) < 0.0.30, ECOSYSTEM:introduced=0,fixed=0.0.30.

Is there a fix for CVE-2025-71344?

Yes. picklescan (PyPI): upgrade to 0.0.30 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-71344 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2025-71344?

Check whether you run picklescan (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-71344: picklescan detection bypass via ensurepip._run_pip

Q: Which products and versions are affected?

picklescan (PyPI) < 0.0.30, ECOSYSTEM:introduced=0,fixed=0.0.30.

Q: Is there a fix for CVE-2025-71344?

Yes. picklescan (PyPI): upgrade to 0.0.30 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2025-71344 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2025-71344?

Check whether you run picklescan (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-71344 · Severity: high · CVSS 8.1 · Published 2026-06-22

Picklescan is a security tool used to detect malicious code hidden within Python pickle files, which are commonly used to store Machine Learning models. A vulnerability was found where the tool fails to detect a specific dangerous function, allowing attackers to hide malicious code that executes automatically when a user loads a scanned file. This could lead to unauthorized access or data theft on systems that trust Picklescan to verify the safety of third-party AI models.

Technologies: picklescan (PyPI). Vendors: PyPI.

Quick answers

Is CVE-2025-71344 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-71344 being exploited in the wild.
How severe is CVE-2025-71344?: High severity, with a CVSS score of 8.1, published 22 June 2026.
Which products and versions are affected?: picklescan (PyPI) < 0.0.30, ECOSYSTEM:introduced=0,fixed=0.0.30.
Is there a fix for CVE-2025-71344?: Yes. picklescan (PyPI): upgrade to 0.0.30 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-71344 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2025-71344?: Check whether you run picklescan (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

picklescan (PyPI): upgrade to 0.0.30 or later
```
pip install "picklescan>=0.0.30"
```

Technical details

Picklescan before version 0.0.30 is vulnerable to a detection bypass. The tool's scanning logic does not account for the 'ensurepip._run_pip' function, which can be leveraged within a pickle's '__reduce__' method to execute arbitrary commands. An attacker can craft a malicious pickle file that passes Picklescan's safety checks but triggers remote code execution (RCE) when processed by 'pickle.load()'. This is particularly relevant for supply chain security in Machine Learning workflows using PyTorch models. The issue is fixed in version 0.0.30.

Affected products

mmaitre314 picklescan < 0.0.30

Identifiers

CVE-2025-71344
GHSA-xp4f-hrf8-rxw7
PYSEC-2026-1792

Timeline

2025-08-26: advisory: GHSA-xp4f-hrf8-rxw7 published
2025-08-26: patched: Version 0.0.30 released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.