The vulnerability identified as CVE-2025-71342 affects picklescan versions prior to 0.0.30. The tool fails to detect malicious pickle files that use idlelib.run.Executive.runcode within reduce methods. This failure allows attackers to embed undetected executable code in pickle files, which runs during the deserialization process (pickle.load). This can lead to remote code execution in environments using PyTorch models and may facilitate supply chain attacks. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

Successful exploitation allows remote code execution through malicious pickle files during deserialization, posing a high risk to systems that load untrusted pickle data, particularly in PyTorch model workflows. This can lead to compromise of the host environment and supply chain integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid loading pickle files from untrusted or unauthenticated sources to mitigate risk.