CVE-2025-71343 | BDVDB-2026-345539 Detail

Description#

picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen.ParserGenerator.make_label function in the reduce method. Attackers can craft malicious pickle files with embedded code that evades detection but executes arbitrary commands when pickle.load() is called.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-07-04Record published in the CVE List.
2. Version 22026-07-07Most recent update recorded in the CVE List.