Vulnerability details

CVE-2026-22608

trailofbits fickling

Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

CVSS 4.0

8.9High

Official description

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, both ctypes and pydoc modules aren't explicitly blocked. Even other existing pickle scanning tools (like picklescan) do not block pydoc.locate. Chaining these two together can achieve RCE while the scanner still reports the file as LIKELY_SAFE. This issue has been patched in version 0.1.7.

CVSS scores

Score	Version	Source	Vector
8.9High	4.0	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P`

Affected products

Vendor	Product	Versions	Source
trailofbits	fickling	< 0.1.7	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/trailofbits/fickling/commit/b793563e60a5e039c5837b09d7f4f6b92e6040d1 x_refsource_MISC
https://github.com/trailofbits/fickling/releases/tag/v0.1.7 x_refsource_MISC
https://github.com/trailofbits/fickling/security/advisories/GHSA-5hvc-6wx8-mvv4 x_refsource_CONFIRM

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-01-10
Last updated: 2026-01-13
State: Published
Assigner (CNA): GitHub_M

Exploit prediction (EPSS)

0.39%

Probability of exploitation in 30 days

33.6%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-184
Incomplete List of Disallowed Inputs
CWE-502
Deserialization of Untrusted Data