CVE-2025-71323
picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking direct syscalls and accessing raw memory. Attackers can craft malicious pickle files using ctypes.WinDLL to load kernel32.dll and execute arbitrary commands, bypassing sandbox protections and gadget chain detection.
- Affected products
- Picklescan
- Fix
- Available
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 0.8% (52th percentile)
- Weakness
- CWE-184
- NVD status
- Deferred
- Published
- 2026-06-17
CVE-2025-71323 at NVD
No indexed exploits for CVE-2025-71323 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2025-71323 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.