8.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-22607

CVE-2026-22607: Fickling Blocklist Bypass: cProfile.run()

Fickling is a Python pickling decompiler and static analyzer. Fickling versions up to and including 0.1.6 do not treat Python's cProfile module as unsafe. Because of this, a malicious pickle that uses cProfile.run() is classified as SUSPICIOUS instead of OVERTLY_MALICIOUS. If a user relies on Fickling's output to decide whether a pickle is safe to deserialize, this misclassification can lead them to execute attacker-controlled code on their system. This affects any workflow or product that uses Fickling as a security gate for pickle deserialization. This issue has been patched in version 0.1.7.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-22607

CVE-2026-22607:

8.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
fickling	pip	<= 0.1.6	0.1.7

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a security bypass in the fickling library, which is designed to analyze pickle files for safety. The root cause is an incomplete blocklist of dangerous modules. The function Pickle.unsafe_imports in fickling/fickle.py was responsible for checking for these modules, but it did not include cProfile. This omission is the core of the vulnerability within the fickling codebase. The exploit for this vulnerability involves using the cProfile.run function, which can execute arbitrary code from a string. A malicious pickle can be crafted to call cProfile.run upon deserialization. Because fickling failed to flag cProfile as unsafe, it would not rate the pickle as overtly malicious, allowing the exploit to succeed in environments that rely on fickling for security. Therefore, two key functions are involved: Pickle.unsafe_imports is the vulnerable function within fickling due to its incomplete logic, and run (from the cProfile module) is the function from the Python standard library that is abused to achieve code execution during exploitation.

Vulnerable functions

Pickle.unsafe_imports

fickling/fickle.py

This function in the `fickling` library is responsible for identifying unsafe imports within a pickle data stream. The vulnerability existed because the blocklist of unsafe modules within this function was incomplete and did not include 'cProfile'. This allowed a malicious pickle using 'cProfile.run()' to bypass detection. The patch adds 'cProfile' to the blocklist, mitigating the vulnerability.

run

cProfile.py

This function in the standard library `cProfile` module is the gadget used to achieve remote code execution. It takes a string and executes it, which is a dangerous operation when the string comes from an untrusted source like a pickle file. The vulnerability in `fickling` was its failure to block the use of this function. During exploitation, this is the function that would be called to execute the attacker's code.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.