VULNERABILITY INTELLIGENCE

CVE-2025-67747

CVSS score7.1 HIGH

EPSS probability0.28%

CISA KEVNot currently listed

Published2025-12-16

Last modified2026-10-07

CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Description

Fickling is a Python pickling decompiler and static analyzer. Versions prior to 0.1.6 are missing `marshal` and `types` from the block list of unsafe module imports. Fickling started blocking both modules to address this issue. This allows an attacker to craft a malicious pickle file that can bypass fickling since it misses detections for `types.FunctionType` and `marshal.loads`. A user who deserializes such a file, believing it to be safe, would inadvertently execute arbitrary code on their system. This impacts any user or system that uses Fickling to vet pickle files for security issues. The issue was fixed in version 0.1.6.

Weakness classification

CWE-184: Incomplete List of Disallowed Inputs
CWE-502: Deserialization of Untrusted Data

Primary references

security-advisories@github.com — Patch
security-advisories@github.com — Issue Tracking
security-advisories@github.com — Release Notes
security-advisories@github.com — Exploit, Third Party Advisory