CVE-2026-22612

HIGH

fickling < 0.1.7 - Detection Bypass via Builtins Blindness

Title source: llm
STIX 2.1

Description

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detection bypass due to "builtins" blindness. This issue has been patched in version 0.1.7.

References (3)

Core 3

Scores

CVSS v3 7.8
EPSS 0.0026
EPSS Percentile 17.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-502
Status published
Products (2)
pypi/fickling 0 - 0.1.7PyPI
trailofbits/fickling < 0.1.7
Published Jan 10, 2026
Tracked Since Feb 18, 2026