Duplicate Advisory: PickleScan has multiple stdlib modules with direct RCE not in blocklist
PickleScan versions before 1.0.4 do not block certain Python standard library modules that allow direct arbitrary command execution. This flaw enables attackers to craft malicious pickle files that import these unblocked modules, bypassing PickleScan's safety validation and leading to remote code execution. The advisory has been withdrawn as a duplicate of GHSA-g38g-8gr9-h9xp but remains for reference.
AI Analysis
Technical Summary
PickleScan prior to version 1.0.4 fails to block at least seven Python standard library modules, including uuid, _osx_support, _aix_support, _pyrepl.pager, and imaplib. These modules expose eight functions that allow direct arbitrary command execution. An attacker can exploit this by crafting malicious pickle files that import these unblocked modules, thereby bypassing PickleScan's safety validation and achieving remote code execution. The vulnerability is tracked with a CVSS 3.1 score of 9.8, indicating critical severity.
Potential Impact
Successful exploitation allows remote code execution without requiring user interaction or privileges, compromising confidentiality, integrity, and availability of affected systems running vulnerable PickleScan versions.
Mitigation Recommendations
A patch is available for PickleScan to address this vulnerability. Users should upgrade to version 1.0.4 or later to ensure these modules are properly blocked and remote code execution is prevented.
Duplicate Advisory: PickleScan has multiple stdlib modules with direct RCE not in blocklist
Description
PickleScan versions before 1.0.4 do not block certain Python standard library modules that allow direct arbitrary command execution. This flaw enables attackers to craft malicious pickle files that import these unblocked modules, bypassing PickleScan's safety validation and leading to remote code execution. The advisory has been withdrawn as a duplicate of GHSA-g38g-8gr9-h9xp but remains for reference.
CVSS v3.1
Score 9.8critical
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
PickleScan prior to version 1.0.4 fails to block at least seven Python standard library modules, including uuid, _osx_support, _aix_support, _pyrepl.pager, and imaplib. These modules expose eight functions that allow direct arbitrary command execution. An attacker can exploit this by crafting malicious pickle files that import these unblocked modules, thereby bypassing PickleScan's safety validation and achieving remote code execution. The vulnerability is tracked with a CVSS 3.1 score of 9.8, indicating critical severity.
Potential Impact
Successful exploitation allows remote code execution without requiring user interaction or privileges, compromising confidentiality, integrity, and availability of affected systems running vulnerable PickleScan versions.
Mitigation Recommendations
A patch is available for PickleScan to address this vulnerability. Users should upgrade to version 1.0.4 or later to ensure these modules are properly blocked and remote code execution is prevented.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-g7vj-qw6x-g3p8
- Osv Schema Version
- 1.4.0
- Ecosystems
- ["PyPI"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 3.1
Threat ID: 6ab4be99f7a7c54106f0dfa9
Added to database: 09/24/2026, 06:09:29 UTC
Last enriched: 09/24/2026, 07:00:49 UTC
Last updated: 09/24/2026, 10:47:33 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.