---
id: CVE-2025-71347
title: >-
  picklescan before 0.0.33 fails to detect malicious pickle files using
  numpy.f2py.crackfortran.param_eval function in reduce methods, allowing
  attackers to bypass security checks
summary: >-
  picklescan before 0.0.33 fails to detect malicious pickle files using
  numpy.f2py.crackfortran.param_eval function in reduce methods, allowing
  attackers to bypass security checks. Remote attackers can embed undetected
  code in pickle files…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'
cwe:
  - CWE-502
published: '2026-07-04'
updated: '2026-07-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71347'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-cffc-mxrf-mhh4
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-undetected-remote-code-execution-via-numpy-f2py-crackfortran-param-eval
    label: disclosure@vulncheck.com
tags:
  - nvd
epss: 0.00638
epssPercentile: 0.48372
ingestedAt: '2026-07-04T21:57:46.832Z'
---

## Overview

picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.param_eval function in reduce methods, allowing attackers to bypass security checks. Remote attackers can embed undetected code in pickle files that executes during deserialization, enabling arbitrary code execution in applications loading untrusted pickle data.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.