CVE-2026-3490

CRITICAL10.0

picklescan - Universal Blocklist Bypass via pkgutil.resolve_name

Published Jun 17, 2026

Modified 2 months ago

Details

picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indirect REDUCE calls. Remote attackers can invoke any blocked function such as os.system, builtins.exec, or subprocess.call to achieve remote code execution.

References

ADVISORY

https://github.com/mmaitre314/picklescan/security/advisories/GHSA-vvpj-8cmc-gx39

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-3490

ADVISORY

https://www.vulncheck.com/advisories/picklescan-universal-blocklist-bypass-via-pkgutil-resolve-name

CVSS Analysis

CVSS v4.0

10.0

Exploitability

Attack Vector