VULNERABILITY INTELLIGENCE
CVE-2025-71362
CVSS score8.1 HIGH
EPSS probability0.43%
CISA KEVNot currently listed
Published2026-07-04
Last modified2026-10-12
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Description
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources.
Weakness classification
- disclosure@vulncheck.com: CWE-502