PT-2026-30602 · Unknown · Pytries Datrie

Dhabaleshwar · Published 2026-04-06 · Updated 2026-04-06 · CVE-2026-5659

Positive Technologies · (AI Summary)

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions pytries datrie versions up to 0.8.3

Description A deserialization issue exists in the Trie.load, Trie.read, and Trie. setstate functions within the src/datrie.pyx file of the trie File Handler component. This can be exploited remotely. The exploit has been publicly disclosed, and the project has been notified but has not yet responded.

Recommendations Update to a version beyond 0.8.3.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-20

CWE-502

Related Identifiers

CVE-2026-5659

Affected Products

Pytries Datrie

References · 8

• 🔥 https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/dartie_code_exec.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5659 · Security Note
• https://github.com/pytries/datrie/issues/109 · Note
• https://twitter.com/VulmonFeeds/status/2041166466632884244 · Twitter Post
• https://vuldb.com/vuln/355483/cti · Note
• https://github.com/pytries/datrie · Note
• https://vuldb.com/vuln/355483 · Note
• https://vuldb.com/submit/785228 · Note