The vulnerability in picklescan prior to version 0.0.28 involves a failure to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basichandlers in their reduce methods. This bypasses the tool's safety checks, allowing remote attackers to craft pickle files containing undetected malicious code that executes upon deserialization. This is classified under CWE-502 (Deserialization of Untrusted Data) and can lead to remote code execution. There is no patch or official fix currently available, and no known exploits in the wild have been reported.

Successful exploitation allows remote attackers to execute arbitrary code on the target system during the deserialization process of malicious pickle files. This can lead to full system compromise depending on the privileges of the process performing deserialization.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid deserializing pickle files from untrusted or unauthenticated sources, especially those involving torch.utils.data.datapipes.utils.decoder.basichandlers in reduce methods.