Read the docs
TI-2025-41443 Aliases CVE-2025-67747GHSA-565g-hwwr-4pp3

Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list

Priority HIGH 66CWE-184Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-502.

Summary

Fickling is a Python pickling decompiler and static analyzer. Versions prior to 0.1.6 are missing `marshal` and `types` from the block list of unsafe module imports. Fickling started blocking both modules to address this issue. This allows an attacker to craft a malicious pickle file that can bypass fickling since it misses detections for `types.FunctionType` and `marshal.loads`. A user who deserializes such a file, believing it to be safe, would inadvertently execute arbitrary code on their system. This impacts any user or system that uses Fickling to vet pickle files for security issues. The issue was fixed in version 0.1.6.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00278 20th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed fickling (trailofbits): 0.1.6fickling (PyPI): 0.1.6

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
trailofbitsficklingbefore 0.1.60.1.6Patch availableCNA
—fickling (PyPI)before 0.1.60.1.6Patch availableGHSA-565g-hwwr-4pp3
  • fickling Vendortrailofbits Affected before 0.1.6 Fixed in 0.1.6 Patch available CNA
  • fickling (PyPI) Vendor— Affected before 0.1.6 Fixed in 0.1.6 Patch available GHSA-565g-hwwr-4pp3

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:trailofbits:fickling:*:*:*:*:*:*:*:*before 0.1.6Vulnerabletrailofbits
  • cpe:2.3:a:trailofbits:fickling:*:*:*:*:*:*:*:* Versions before 0.1.6 Vulnerable ·trailofbits

Remediation

  • Fix · CNA fickling (trailofbits) Fixed in 0.1.6
  • Fix · GHSA-565g-hwwr-4pp3 fickling (PyPI) Fixed in 0.1.6 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-67747
  2. 2026-10-03 Alias added: GHSA-565g-hwwr-4pp3

References

Exploit 1

Patch 1

Advisory 1

Other 3

  • TI-2026-18173 Fickling vulnerable to detection bypass due to "builtins" blindness CVSS 4.0HIGH 8.9
  • TI-2026-18170 Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist CVSS 4.0HIGH 8.9
  • TI-2026-18169 Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection CVSS 4.0HIGH 8.9
  • TI-2026-18168 Fickling Blocklist Bypass: cProfile.run() CVSS 4.0HIGH 8.9
  • TI-2026-18167 Fickling has a bypass via runpy.run_path() and runpy.run_module() CVSS 4.0HIGH 8.9
  • TI-2026-12265 Fickling MLAllowlist analysis pass rendered inoperative by shared mutable state in AnalysisContext.shorten_code() CVSS 3.1CRITICAL 9.8
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences