Unsafe Deserialization Enables Remote Code Execution in jsonpickle

python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. Attackers can craft JSON strings with py/repr directives that invoke the eval function during deserialization to execute system commands and arbitrary code.

Casky was already ahead

This CVE exploits attack patterns that Casky's 301matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

CVE-2021-47952 is a critical remote code execution vulnerability in jsonpickle 2.0.0 that exploits unsafe deserialization of JSON payloads. When an application deserializes untrusted JSON data containing malicious py/repr objects, the library automatically invokes Python's eval function, allowing attackers to execute arbitrary code with the privileges of the running process. This vulnerability affects any application using jsonpickle to process external JSON input, including web services, APIs, data pipelines, and distributed systems that handle user-supplied or third-party data. The 9.8 CVSS score reflects the ease of exploitation and severe impact—remote attackers need no authentication and can achieve complete system compromise from network-accessible services.

Casky's 301 matched skills leverage Claude's extended reasoning to detect the attack patterns underlying this vulnerability across TA0001 (Initial Access) and TA0043 (Reconnaissance) techniques. Practitioners using Casky would identify suspicious deserialization patterns by detecting: JSON payloads containing py/repr directives, eval function invocation chains during data processing, and encoding patterns that obscure malicious Python expressions. The platform's skills map detection strategies to MITRE ATT&CK techniques, helping security teams recognize how attackers establish footholds through compromised data feeds, craft payloads via reconnaissance of target libraries, and escalate privileges through code execution. By correlating these 301 skills with threat intelligence, practitioners gain visibility into both the technical indicators (eval calls, repr object instantiation) and behavioral patterns (data deserialization anomalies, unexpected child process spawning) that signal exploitation attempts against vulnerable jsonpickle implementations.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

301 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2021-47952.

analyzing-apt-group-with-mitre-navigator

threat intelligence · low

Run

analyzing-campaign-attribution-evidence

threat intelligence · low

Run

analyzing-certificate-transparency-for-phishing

threat intelligence · low

Run

MITRE ATT&CK Techniques

TA0001 TA0043

Investigate the attack patterns behind CVE-2021-47952

Casky has 301 skills that investigate the attack patterns behind CVE-2021-47952. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn