CVE-2025-1716 - CVE House
Back to Database
Status published Medium CVE-2025-1716

picklescan - Security scanning bypass via 'pip main'

Vulnerability Description

picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package (hosted, for example, on pypi.org or GitHub) via `pip.main()`. Because pip is not a restricted global, the model, when scanned with picklescan, would pass security checks and appear to be safe, when it could instead prove to be problematic.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-1716

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Trevor Madge (@madgetr) of Sonatype

References

More from mmaitre314

View All →
CVE-2025-1945
picklescan - Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch
Medium 5.3
CVE-2025-1944
picklescan ZIP archive manipulation attack leads to crash
Medium 5.3
CVE-2025-1889
picklescan - Security scanning bypass via non-standard file extensions
Medium 5.3
CVE-2025-10157
PickleScan Bypasses Unsafe Globals Check Using Submodule Imports
Critical 9.3
CVE-2025-10156
PickleScan Security Bypass via Bad CRC in ZIP Archive
Critical 9.3

Affected Vendor

Affected Software

picklescan
Vulnerable Versions:
0.0.1

Timeline

Official Publish: February 26th, 2025
Last Modified: December 29th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-184

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.