Most recent entries from all

EUVD-2026-328297

fkie_cve-2026-53873

picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level profile.run() function, allowing attackers to achieve arbitrary code execution via exec(). Attackers can craft malicious pickle files calling profile.run(statement) to execute arbitrary Python code while picklescan reports zero security issues.

GHSA-7wx9-6375-f5wh — PickleScan's profile.run blocklist mismatch allows exec() bypass

Affected: PyPI: picklescan

## Summary

picklescan v1.0.3 blocks `profile.Profile.run` and `profile.Profile.runctx` but does NOT block the module-level `profile.run()` function. A malicious pickle calling `profile.run(statement)` achieves arbitrary code execution via `exec()` while picklescan reports 0 issues. This is because the blocklist entry `"Profile.run"` does not match the pickle global name `"run"`.

## Severity

**High** — Direct code execution via `exec()` with zero scanner detection.

## Affected Versions

- picklescan v1.0.3 (latest — the profile entries were added in recent versions) - Earlier versions also affected (profile not blocked at all)

## Details

### Root Cause

In `scanner.py` line 199, the blocklist entry for `profile` is:

```python "profile": {"Profile.run", "Profile.runctx"}, ```

When a pickle file imports `profile.run` (the module-level function), picklescan's opcode parser extracts: - `module = "profile"` - `name = "run"`

The blocklist check at line 414 is:

```python elif unsafe_filter is not None and (unsafe_filter == "*" or g.name in unsafe_filter): ```

This checks: is `"run"` in `{"Profile.run", "Profile.runctx"}`?

**Answer: NO.** `"run" != "Profile.run"`. The string comparison is exact — there is no prefix/suffix matching.

### What `profile.run()` Does

```python # From Python's Lib/profile.py def run(statement, filename=None, sort=-1): prof = Profile() try: prof.run(statement) # Calls exec(statement) except SystemExit: pass ...…

PYSEC-2026-455 — PickleScan's profile.run blocklist mismatch allows exec() bypass