CVE-2026-53874 json
picklescan - Arbitrary Code Execution via Obfuscated eval Call
published 2026-02-02 9 mo ago modified 2026-11-08 22 h ago also EUVD-2026-37740 , GHSA-9m3x-qqw2-h32h , PYSEC-2026-1789
- cvss
- 9.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 44%
- public exploits
- 0
- none known
Summary
picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute arbitrary code by hiding eval calls nested under callable objects via getattr. Attackers can embed malicious code in pickle files that evades detection but executes when the pickle is loaded from untrusted sources.
Patch / fix
- pypi picklescan 1.0.1
- picklescan picklescan 1.0.1
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- total
- Assessed
- 4 mo ago
Exploit prediction
0.52% chance of exploitation in the next 30 days, higher than 44% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/mmaitre314/picklescan/security/advisories/GHSA-9m3x-qqw2-h32h referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 9.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 4.0 | 9.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | picklescan | <1.0.1 |
1.0.1 |
Affected products
- picklescan picklescan
Classification
- Weakness
-
- CWE-502 Deserialization of Untrusted Data
References
-
github.com
/mmaitre314/picklescan/pull/59
web
-
github.com
/mmaitre314/picklescan/commit/173c8f2a869ea9b69b543477525ec70611c3c6f4
web
-
github.com
/mmaitre314/picklescan/security/advisories/GHSA-9m3x-qqw2-h32h
vendor-advisory, exploit, web
-
vulncheck.com
/advisories/picklescan-arbitrary-code-execution-via-obfuscated-eval-call
third-party-advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2026-53874
advisory
-
github.com
/mmaitre314/picklescan
package
-
github.com
/mmaitre314/picklescan/releases/tag/v1.0.1
web
-
pypi.org
/project/picklescan
package
-
github.com
/advisories/GHSA-9m3x-qqw2-h32h
advisory
Sources
- CVE List CVE-2026-53874
- GitHub Advisory GHSA-9m3x-qqw2-h32h
- NVD CVE-2026-53874
- OSV PYSEC-2026-1789
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.