N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-58367

CVE-2025-58367: DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more

Summary

Python class pollution is a novel vulnerability categorized under CWE-915. The Delta class is vulnerable to class pollution via its constructor, and when combined with a gadget available in DeltaDiff itself, it can lead to Denial of Service and Remote Code Execution (via insecure Pickle deserialization).

The gadget available in DeepDiff allows deepdiff.serialization.SAFE_TO_IMPORT to be modified to allow dangerous classes such as posix.system, and then perform insecure Pickle deserialization via the Delta class. This potentially allows any Python code to be executed, given that the input to Delta is user-controlled.

Depending on the application where DeepDiff is used, this can also lead to other vulnerabilities. For example, in a web application, it might be possible to bypass authentication via class pollution.

Details

The Delta class can take different object types as a parameter in its constructor, such as a DeltaDiff object, a dictionary, or even just bytes (that are deserialized via Pickle).

When it takes a dictionary, it is usually in the following format:

Delta({"dictionary_item_added": {"root.myattr['foo']": "bar"}})

Trying to apply class pollution here does not work, because there is already a filter in place: https://github.com/seperman/deepdiff/blob/b639fece73fe3ce4120261fdcff3cc7b826776e3/deepdiff/path.py#L23

However, this code only runs when parsing the path from a string. The _path_to_elements function helpfully returns the given input if it is already a list/tuple: https://github.com/seperman/deepdiff/blob/b639fece73fe3ce4120261fdcff3cc7b826776e3/deepdiff/path.py#L52-L53

This means that it is possible to pass the path as the internal representation used by Delta, bypassing the filter:

Delta(
    {
        "dictionary_item_added": {
            (
                ("root", "GETATTR"),
                ("__init__", "GETATTR"),
                ("__globals__", "GETATTR"),
                ("PWNED", "GET"),
            ): 1337
        }
    },
)

Miggo Vulnerability Database

→

CVE-2025-58367

CVE-2025-58367:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
deepdiff	pip	>= 5.0.0, <= 8.6.0	8.6.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a class pollution weakness in the deepdiff library, specifically within the Delta class. The root cause is insufficient validation of object paths provided to the Delta constructor. The library had a check for malicious path elements like __globals__, but this check only applied when the path was a string. By providing the path in its internal list/tuple format, an attacker could bypass this check.

The exploit works by crafting a path that traverses up from a given object to its containing class, module, and eventually to Python's global built-ins. This allows an attacker to modify arbitrary classes at runtime. The proof-of-concept demonstrates two attack vectors:

Denial of Service (DoS): By polluting the built-in int class, making it uncallable and causing the application to crash.
Remote Code Execution (RCE): This is a two-stage attack. First, the class pollution vulnerability is used to modify the deepdiff.serialization.SAFE_TO_IMPORT set, which acts as an allowlist for deserialization. The attacker adds a dangerous module like posix.system to this set. In a second step, the attacker provides a malicious pickle payload to the Delta constructor, which now allows the deserialization of an object that executes arbitrary system commands.

The patch addresses the vulnerability comprehensively. It introduces a new function, check_elem, which raises a ValueError if a path element is a dunder attribute. This check is then inserted into all functions responsible for path traversal (_get_nested_obj, _get_nested_obj_and_force, _get_elements_and_details, _get_elem_and_compare_to_old_value). Additionally, to prevent the RCE vector, the SAFE_TO_IMPORT set was converted to an immutable frozenset, making it impossible to modify at runtime. The identified vulnerable functions are the key locations in the code that allowed the unsafe path traversal to occur.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2025-58367: DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more

Summary

Details

CVE-2025-58367:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Basic Information

Basic Information

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Technical Details

N/A

N/A

CVE-2025-58367: DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more

Summary

Details

Using dict

Proof of Concept

Denial of Service

Remote Code Execution

Who is affected?

Mitigations

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI