Beveiligingsadvies

CVE-2025-71361

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-24 11:53:07
Laatst bijgewerkt 2026-06-24 16:02:42
Toegewezen door VulnCheck
CVSS-score 8.1
Status PUBLISHED

Beschrijving

picklescan before 0.0.29 fails to detect malicious idlelib.calltip.Calltip.fetch_tip calls in pickle files, allowing remote code execution. Attackers can embed undetected payloads in pickle files that execute arbitrary code when loaded via pickle.load().