TI-2025-09323 Aliases CVE-2025-10156 GHSA-mjqp-26hc-grxg

PickleScan Security Bypass via Bad CRC in ZIP Archive

HIGH 73CWE-755Published 2025-09-17 · Updated 2025-09-17

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-693.

Summary

An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check (CRC), which causes the scanner to halt and fail to analyze the contents for malicious pickle files. When the file incorrectly considered safe is loaded, it can lead to the execution of malicious code.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.01481 74th percentileScored 2026-11-07

Public exploit Yes 3 exploit referencesTagged by the CNA and NVD

Fix Fixed picklescan (PyPI): 0.0.31

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
picklescan	picklescan	up to 0.0.30	—	No fix listed	CNA
—	picklescan (PyPI)	before 0.0.31	0.0.31	Patch available	GHSA-mjqp-26hc-grxg

picklescan Vendorpicklescan Affected up to 0.0.30 Fixed in — No fix listed CNA
picklescan (PyPI) Vendor— Affected before 0.0.31 Fixed in 0.0.31 Patch available GHSA-mjqp-26hc-grxg

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:mmaitre314:picklescan::::::::	before 0.0.31	Vulnerable	picklescan

cpe:2.3:a:mmaitre314:picklescan:*:*:*:*:*:*:*:* Versions before 0.0.31 Vulnerable ·picklescan

Remediation

Fix · GHSA-mjqp-26hc-grxg picklescan (PyPI) Fixed in 0.0.31 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2025-10156
2026-10-03 Alias added: GHSA-mjqp-26hc-grxg

References

Exploit 3

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2025-10156

Other 4

TI-2025-09324 PickleScan Bypasses Unsafe Globals Check Using Submodule Imports CVSS 4.0CRITICAL 9.3
TI-2025-09322 PickleScan Security Bypass Using Misleading File Extension CVSS 4.0CRITICAL 9.3
TI-2026-40669 picklescan - Arbitrary File Creation via logging.FileHandler Deserialization CVSS 4.0MEDIUM 6.9
TI-2025-43498 picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files CVSS 4.0HIGH 7.6
TI-2025-43477 picklescan - Arbitrary Code Execution via Undetected idlelib.pyshell.ModifiedInterpreter.runcommand CVSS 4.0HIGH 7.6
TI-2025-43468 picklescan - Arbitrary Code Execution via torch.utils._config_module.load_config Bypass CVSS 4.0HIGH 7.6

See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences