PT-2026-55705 · Trailofbits · Fickling

Christopher Aziz · Published 2026-07-04 · Updated 2026-07-04 · CVE-2026-14535

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trail of Bits fickling versions prior to 0.1.12

Description An issue exists where the UnsafeImportsML analysis pass unconditionally calls the AnalysisContext.shorten code(node) function on every import node. This action populates a shared AnalysisContext.reported shortened code set, which causes the subsequent MLAllowlist analysis pass to skip its allowlist checks entirely. Consequently, the MLAllowlist pass becomes dead code and fails to identify imports of modules outside the known-safe ML ecosystem. This allows standard library modules not present in the UNSAFE IMPORTS denylist to be invoked via pickle deserialization when the fickling.load() API calls check safety(), which incorrectly returns a LIKELY SAFE verdict, leading to the execution of the payload.

Recommendations Update to a version newer than 0.1.11.

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2026-14535

Affected Products

Fickling

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-14535 · Security Note
• https://github.com/trailofbits/fickling/commit/41ce7cb01edd97072994039574a2301ebb3f463d · Note
• https://github.com/trailofbits/fickling/security/advisories/GHSA-cffv-grgg-g429 · Note
• https://github.com/trailofbits/fickling/releases/tag/v0.1.12 · Note
• https://github.com/trailofbits/fickling/pull/278 · Note
• https://twitter.com/CVEnew/status/2073447437654438101 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1unfdmu/serious_vulnerability_found_in_trail_of_bits · Reddit Post
• https://twitter.com/infoflowcloud/status/2073448186119610766 · Twitter Post