CVE-2026-22609

Description

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, the unsafe_imports() method in Ficklings static analyzer fails to flag several high-risk Python modules that can be used for arbitrary code execution. Malicious pickles importing these modules will not be detected as unsafe, allowing attackers to bypass Ficklings primary static safety checks. This issue has been patched in version 0.1.7.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.044

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in Python-fickling 0.1.7	Windows
Multiple vulnerabilities are fixed in Python-fickling for linux 0.1.7	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234