CVE-2025-71375
HIGH
NVD
CVSS Score
8.1
Severity
HIGH
Published
Jul 04, 2026
Vendor
unknown
Description
picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payloads using _operator.methodcaller that evade detection and execute arbitrary code when loaded by pickle.load().