CVE-2025-10156
Critical
Description
An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check (CRC), which causes the scanner to halt and fail to analyze the contents for malicious pickle files. When the file incorrectly considered safe is loaded, it can lead to the execution of malicious code.
SeverityCritical
CVSS9.8
Exploit probability—
ProductMmaitre314 Picklescan
PublishedSep 17, 2025
First seenSep 17, 2025
Weakness typeCWE-755CWE-755
How to fix
Update
- mmaitre314 picklescan0.0.31 or later
- picklescan0.0.31 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mmaitre314 picklescan | v < 0.0.31 | 0.0.31 |
| picklescanPyPI | v < 0.0.31 | 0.0.31 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.