The vulnerability identified as CVE-2025-71345 affects picklescan versions prior to 0.0.30. The tool fails to detect malicious pickle files that invoke the torch.utils.bottleneck.__main__.run_autograd_prof function. Because pickle deserialization can execute embedded code, attackers can craft pickle files that execute arbitrary code remotely when deserialized, leading to remote code execution. This is classified under CWE-502 (Deserialization of Untrusted Data). No patch or fix is currently indicated in the available data.

Successful exploitation allows remote code execution via deserialization of malicious pickle files that invoke a specific function in the torch.utils.bottleneck module. This can lead to full compromise of the system processing the pickle files. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid deserializing pickle files from untrusted sources, especially those that may invoke torch.utils.bottleneck.__main__.run_autograd_prof. Consider additional application-level controls to restrict or validate pickle deserialization.