CVE-2026-22612

HIGH

Trailofbits Fickling < 0.1.7 - Insecure Deserialization

Title source: rule
STIX 2.1

Description

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, Fickling is vulnerable to detection bypass due to "builtins" blindness. This issue has been patched in version 0.1.7.

References (3)

Scores

CVSS v3 7.8
EPSS 0.0007
EPSS Percentile 20.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-502
Status published
Products (2)
pypi/fickling 0 - 0.1.7PyPI
trailofbits/fickling < 0.1.7
Published Jan 10, 2026
Tracked Since Feb 18, 2026