Critical RCE Vulnerability in picklescan Allows Blocklist Bypass (CVE-2026-3490)

Overview

A critical remote code execution vulnerability (CVSS 10.0) in picklescan enables attackers to bypass blocklists and execute arbitrary code via malicious pickle payloads. Unpatched systems using vulnerable versions face imminent risk of unauthenticated exploitation.

Technical Analysis

picklescan versions before 1.0.4 inadequately restrict `pkgutil.resolve_name` during deserialization, enabling attackers to construct indirect REDUCE calls that resolve prohibited functions like `os.system` or `subprocess.call`. Exploitation requires an endpoint accepting untrusted pickle inputs, which are then deserialized with blocklist bypasses intact. Attackers can trigger arbitrary code execution without authentication, leveraging Python's native pickle deserialization mechanisms to escalate privileges or exfiltrate data.

Enterprise & DIB Impact

Defense Industrial Base (DIB) and enterprise systems using picklescan in untrusted environments face high risk of data breaches, system compromise, and lateral movement. The CVSS 10.0 rating indicates a flaw that is both easily exploitable and deeply damaging, particularly for organizations handling sensitive or mission-critical workloads.

Recommended Actions

• Upgrade to picklescan 1.0.4 immediately
• validate and sanitize all deserialization inputs
• avoid processing untrusted pickle data in production systems
• monitor logs for anomalous deserialization activity
• and implement network-layer restrictions to segment deserialization endpoints.