Skip to content
Heist/ feed
Back to feed
Critical

picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw

Type: advisorySources: OSV

picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pickle files with arguments at position zero to trigger unexpected exceptions and evade security scanning.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2025-71325
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 13:11 UTC · Revision 1

Source evidence

picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw

core-osv · Original source

Published 17 Jun 2026, 15:05 UTC

picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pickle files with arguments at position zero to trigger unexpected exceptions and evade security scanning.

osv:CVE-2025-71325
Complete source record
{
  "id": "fb83a9dbd190d4d79825a79723f08c7fbfffcb0602a2fb643309e8be0c410285",
  "url": "https://osv.dev/vulnerability/CVE-2025-71325",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw",
    "summary": "picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pickle files with arguments at position zero to trigger unexpected exceptions and evade security scanning.",
    "evidence": "osv:CVE-2025-71325",
    "products": [],
    "severity": "critical",
    "structured": {
      "id": "CVE-2025-71325",
      "aliases": [
        "CVE-2025-71325",
        "GHSA-9gvj-pp9x-gcfr",
        "PYSEC-2026-1788"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/mmaitre314/picklescan",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "58983e1c20973ac42f2df7ff15d7c8cd32f9b688"
                },
                {
                  "fixed": "2a8383cfeb4158567f9770d86597300c9e508d0f"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.0.27"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                  },
                  {
                    "range": [
                      {
                        "fixed": "2a8383cfeb4158567f9770d86597300c9e508d0f"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v0.0.25",
            "v0.0.24",
            "v0.0.23",
            "v0.0.22",
            "v0.0.21",
            "v0.0.20",
            "v0.0.19",
            "v0.0.18",
            "v0.0.17",
            "v0.0.15",
            "v0.0.14",
            "v0.0.13",
            "v0.0.12",
            "v0.0.11",
            "v0.0.10",
            "v0.0.9",
            "v0.0.8",
            "v0.0.7",
            "v0.0.6",
            "v0.0.5",
            "v0.0.4",
            "v0.0.3",
            "v0.0.2"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-71325.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:28.784679484Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71325.json",
        "https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9gvj-pp9x-gcfr",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-71325",
        "https://www.vulncheck.com/advisories/picklescan-detection-bypass-via-stack-global-opcode-parsing-logic-flaw",
        "https://github.com/mmaitre314/picklescan/commit/2a8383cfeb4158567f9770d86597300c9e508d0f"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-391"
        ],
        "cna_assigner": "VulnCheck",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71325.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-71325",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 495698,
  "published_at": "2026-06-17T15:05:00.84+00:00"
}