https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:59:46.674093+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-71366 CVE-2025-71366 — picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile 2026-10-08T10:59:46.689451+00:00

Affected: picklescan

picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle files, allowing attackers to bypass safety checks. Remote attackers can embed undetected code in pickle files to achieve arbitrary code execution when victims load the files.