CVE-2026-22608
HIGHfickling < 0.1.7 - Remote Code Execution via Unblocked ctypes and pydoc Modules
Title source: llmDescription
Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, both ctypes and pydoc modules aren't explicitly blocked. Even other existing pickle scanning tools (like picklescan) do not block pydoc.locate. Chaining these two together can achieve RCE while the scanner still reports the file as LIKELY_SAFE. This issue has been patched in version 0.1.7.
References (3)
Core 3
Core References
Vendor Advisory x_refsource_confirm
https://github.com/trailofbits/fickling/security/advisories/GHSA-5hvc-6wx8-mvv4
Patch x_refsource_misc
https://github.com/trailofbits/fickling/commit/b793563e60a5e039c5837b09d7f4f6b92e6040d1
Release Notes x_refsource_misc
https://github.com/trailofbits/fickling/releases/tag/v0.1.7
Scores
CVSS v3
7.8
EPSS
0.0035
EPSS Percentile
26.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
total
Details
CWE
CWE-184
CWE-502
Status
published
Products (2)
pypi/fickling
0 - 0.1.7PyPI
trailofbits/fickling
< 0.1.7
Published
Jan 10, 2026
Tracked Since
Feb 18, 2026