7.6

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-71354

CVE-2025-71354: picklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetText

picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.debugobj.ObjectTreeItem.SetText function in reduce methods. Attackers can craft pickle files with embedded code that bypasses picklescan detection and executes arbitrary commands when pickle.load() is called.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-71354

CVE-2025-71354:

7.6

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation NoneAutomatable NoTech Impact Total

Select your environment

→SSVCScheduled60 days

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
picklescan	pip	< 0.0.29	0.0.29

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability described in GHSA-3vg9-h568-4w9m is a missing detection in the picklescan library. The library is designed to scan pickle files for known dangerous functions that could lead to remote code execution. The vulnerability is that idlelib.debugobj.ObjectTreeItem.SetText, a function in Python's standard library, was not on picklescan's list of dangerous functions. An attacker could therefore craft a pickle file that uses this function to execute arbitrary code, and picklescan would incorrectly report the file as safe.

The patch, found in commit aecd11be98702caa9ba9b12189d91ad596a36114, rectifies this omission by adding "idlelib.debugobj": {"ObjectTreeItem.SetText"} to the dangerous_globals dictionary in src/picklescan/scanner.py. This dictionary is used by the scanner to identify malicious pickle files.

During exploitation (i.e., when a malicious pickle file is loaded using pickle.load()), the function idlelib.debugobj.ObjectTreeItem.SetText would be executed and would therefore appear in a runtime profile or stack trace. This is the function that directly leads to the execution of the malicious payload.

Vulnerable functions

idlelib.debugobj.ObjectTreeItem.SetText

src/picklescan/scanner.py

The vulnerability lies in picklescan's failure to recognize 'idlelib.debugobj.ObjectTreeItem.SetText' as a dangerous function. An attacker can craft a malicious pickle file that, when loaded, executes arbitrary code through this function. The patch addresses this by adding the function to the denylist, allowing picklescan to detect and flag it as malicious.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.