Beveiligingsadvies

CVE-2025-71378

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-21 13:26:50

Laatst bijgewerkt 2026-06-23 02:46:13

Toegewezen door VulnCheck

CVSS-score 8.1

Status PUBLISHED

Beschrijving

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load().

← Alle CVE's bekijken Bekijk op cve.org ↗