PT-2025-51354 · Fickling · Fickling

Published 2025-12-16 · Updated 2026-01-14 · CVE-2025-67747

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Fickling versions prior to 0.1.6

Description Fickling, a Python pickling decompiler and static analyzer, lacks marshal and types in its list of blocked unsafe module imports. This allows attackers to create malicious pickle files that bypass Fickling’s security checks, specifically by utilizing types.FunctionType and marshal.loads. Deserializing these files can lead to arbitrary code execution on the system. This affects any user or system relying on Fickling to assess the security of pickle files.

Recommendations Versions prior to 0.1.6 should be updated to version 0.1.6 or later.

Exploit

Fix

Deserialization of Untrusted Data

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-502

CWE-184

Related Identifiers

CVE-2025-67747

GHSA-565G-HWWR-4PP3

Affected Products

Fickling

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67747.json · Exploit
• 🔥 https://github.com/trailofbits/fickling/security/advisories/GHSA-565g-hwwr-4pp3 · Exploit
• https://github.com/trailofbits/fickling/commit/4e34561301bda1450268d1d7b0b2b151de33b913 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-67747 · Security Note
• https://osv.dev/vulnerability/CVE-2025-67747 · Vendor Advisory
• https://github.com/trailofbits/fickling/releases/tag/v0.1.6 · Note
• https://github.com/trailofbits/fickling/pull/186 · Note
• https://twitter.com/CVEnew/status/2002836005305393196 · Twitter Post
• https://t.me/CVEtracker/39903 · Telegram Post
• https://twitter.com/Cezar_H_Linux/status/2011373226342105135 · Twitter Post