Duplicate Advisory: Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand
### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-j343-8v2j-ff7w. This link is maintained to preserve external references. ### Original Description picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims.
AI Analysis
Technical Summary
Picklescan prior to version 0.0.30 does not detect malicious pickle files that utilize the idlelib.pyshell.ModifiedInterpreter.runcommand method in reduce operations. This detection failure enables attackers to embed code within pickle files that executes remote commands upon deserialization by victims. The advisory is a duplicate and has been withdrawn, with GHSA-j343-8v2j-ff7w as the primary reference. The vulnerability is tracked under CWE-502 (Deserialization of Untrusted Data) and has a CVSS v3.1 score of 8.1, indicating high severity. A patch is available to fix this issue.
Potential Impact
Successful exploitation allows attackers to execute remote commands on victim systems by embedding malicious code in pickle files that are not detected by vulnerable versions of Picklescan. This can lead to high confidentiality and integrity impacts, though availability is not affected. No known exploits are reported in the wild.
Mitigation Recommendations
A patch is available for Picklescan to address this detection failure. Users should upgrade to version 0.0.30 or later to ensure malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand are detected. No additional mitigation steps are indicated by the vendor advisory.
Duplicate Advisory: Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand
Description
### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-j343-8v2j-ff7w. This link is maintained to preserve external references. ### Original Description picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims.
CVSS v3.1
Score 8.1high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Picklescan prior to version 0.0.30 does not detect malicious pickle files that utilize the idlelib.pyshell.ModifiedInterpreter.runcommand method in reduce operations. This detection failure enables attackers to embed code within pickle files that executes remote commands upon deserialization by victims. The advisory is a duplicate and has been withdrawn, with GHSA-j343-8v2j-ff7w as the primary reference. The vulnerability is tracked under CWE-502 (Deserialization of Untrusted Data) and has a CVSS v3.1 score of 8.1, indicating high severity. A patch is available to fix this issue.
Potential Impact
Successful exploitation allows attackers to execute remote commands on victim systems by embedding malicious code in pickle files that are not detected by vulnerable versions of Picklescan. This can lead to high confidentiality and integrity impacts, though availability is not affected. No known exploits are reported in the wild.
Mitigation Recommendations
A patch is available for Picklescan to address this detection failure. Users should upgrade to version 0.0.30 or later to ensure malicious pickle files using idlelib.pyshell.ModifiedInterpreter.runcommand are detected. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-8mc5-7w9m-fqv6
- Osv Schema Version
- 1.4.0
- Ecosystems
- ["PyPI"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6aa47eb655bf5e2cf5857962
Added to database: 09/11/2026, 22:20:38 UTC
Last enriched: 09/11/2026, 22:47:04 UTC
Last updated: 09/12/2026, 01:01:23 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.