8.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-22608

CVE-2026-22608: Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, both ctypes and pydoc modules aren't explicitly blocked. Even other existing pickle scanning tools (like picklescan) do not block pydoc.locate. Chaining these two together can achieve RCE while the scanner still reports the file as LIKELY_SAFE. This issue has been patched in version 0.1.7.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-22608

CVE-2026-22608:

8.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
fickling	pip	<= 0.1.6	0.1.7

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in an incomplete blocklist of unsafe modules within the fickling library. Specifically, the UNSAFE_IMPORTS set, which is used by the Pickled.unsafe_imports function to detect potentially dangerous imports in a pickle file, was missing the ctypes and pydoc modules. The proof-of-concept demonstrates that an attacker can chain these two modules to achieve remote code execution. The pydoc.locate function can be used to get a reference to any function by its string name, including dangerous ones from ctypes like WinExec. The unsafe_imports function is the security control that should have prevented this, but it failed due to the incomplete blocklist. The patch rectifies this by adding ctypes and pydoc to the UNSAFE_IMPORTS set. Therefore, when analyzing a malicious pickle exploiting this vulnerability, the Pickled.unsafe_imports function would be present in the runtime profile as it is the function performing the inadequate security check.

Vulnerable functions

Pickled.unsafe_imports

fickling/fickle.py

The function `unsafe_imports` in the `Pickled` class is responsible for detecting unsafe imports within a pickle file. It does this by checking imported modules against a predefined set of unsafe modules called `UNSAFE_IMPORTS`. The vulnerability existed because `ctypes` and `pydoc` were not included in this set, allowing an attacker to use these modules to execute arbitrary code. This function would fail to identify the malicious pickle as unsafe.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.