python-pickle-exploit

The Python Pickle Exploit: Why Unpickling Untrusted Data Runs Code

A Python pickle exploit works because unpickling can execute arbitrary code during deserialization. Here is how the class works, why it is unavoidable by design, and what to use instead.