---
id: CVE-2025-71362
title: >-
  picklescan before 0.0.33 fails to detect unsafe deserialization when
  numpy.f2py.crackfortran functions call eval on arbitrary strings
summary: >-
  picklescan before 0.0.33 fails to detect unsafe deserialization when
  numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers
  can embed malicious code in pickle files that executes when loaded from
  untrusted sources.
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'
cwe:
  - CWE-502
published: '2026-07-04'
updated: '2026-07-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-71362'
references:
  - url: >-
      https://github.com/mmaitre314/picklescan/security/advisories/GHSA-r8g5-cgf2-4m4m
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-unsafe-deserialization-in-numpy-f2py-crackfortran
    label: disclosure@vulncheck.com
tags:
  - nvd
epss: 0.00431
epssPercentile: 0.34858
ingestedAt: '2026-07-04T21:57:46.843Z'
---

## Overview

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.