CVE ID :CVE-2025-71340 Published : June 25, 2026, 9:41 p.m. | 1 hour, 30 minutes ago Description :picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode in __reduce__ methods. Attackers can embed undetected code in pickle files...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2025-71340 - picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcode

VERWANDTEARTIKEL

CVE-2025-71338 - Flowise - Arbitrary File Write to Remote Code Execution via document-store API

CVE-2025-71335 - Flowise - Session Invalidation Failure After Password Change

CVE-2025-71336 - Flowise - Unsandboxed Remote Code Execution via Custom MCP

CVE-2025-71334 - Flowise - Arbitrary File Access via Missing Chat Flow ID Validation

CVE-2025-71328 - Flowise - Unverified Password Change via Account Settings

CVE-2025-71333 - Flowise - Arbitrary File Upload via Unauthenticated /api/v1/attachments Endpoint