9.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-53873

CVE-2026-53873: picklescan - Arbitrary Code Execution via profile.run() Blocklist Bypass

picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level profile.run() function, allowing attackers to achieve arbitrary code execution via exec(). Attackers can craft malicious pickle files calling profile.run(statement) to execute arbitrary Python code while picklescan reports zero security issues.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-53873

CVE-2026-53873:

9.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation pocAutomatable YesTech Impact Total

Select your environment

→SSVCScheduled60 days

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
picklescan	pip	< 1.0.4	1.0.4

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The root cause of this vulnerability is an incomplete blocklist in picklescan. The scanner was configured to block profile.Profile.run and profile.Profile.runctx but failed to block the module-level functions profile.run and profile.runctx. Both of these module-level functions can execute arbitrary code via exec(). An attacker could craft a malicious pickle file that calls profile.run('...arbitrary code...'). When this pickle is loaded in an application that uses picklescan for security, picklescan would fail to detect the dangerous call, allowing the arbitrary code to be executed. The patch resolves this by blocking all functions from the profile module ("profile": "*"), ensuring that profile.run and profile.runctx are no longer allowed.

Vulnerable functions

run

src/picklescan/scanner.py

The `picklescan` blocklist for the 'profile' module was incomplete. It blocked `Profile.run` but not the module-level function `run`. A malicious pickle could invoke `profile.run(statement)`, which executes the statement using `exec()`, leading to arbitrary code execution. The scanner would not detect this as `run` was not in the blocklist.

runctx

src/picklescan/scanner.py

Similar to `profile.run`, the module-level `runctx` function was not included in `picklescan`'s blocklist. A malicious pickle could use `profile.runctx(...)` to execute arbitrary code via `exec()`, bypassing the scanner.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.