8.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-22609

CVE-2026-22609: Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist

Fickling is a Python pickling decompiler and static analyzer. Prior to version 0.1.7, the unsafe_imports() method in Fickling's static analyzer fails to flag several high-risk Python modules that can be used for arbitrary code execution. Malicious pickles importing these modules will not be detected as unsafe, allowing attackers to bypass Fickling's primary static safety checks. This issue has been patched in version 0.1.7.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-22609

CVE-2026-22609:

8.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
fickling	pip	<= 0.1.6	0.1.7

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the fickling static analyzer because its StaticAnalyzer.unsafe_imports method maintained an incomplete blocklist of dangerous Python modules. This allowed an attacker to craft a malicious pickle that imported modules not on the list, such as ctypes, importlib, runpy, code, and multiprocessing, to achieve arbitrary code execution. Fickling would incorrectly classify such a pickle as safe, thus bypassing its primary security mechanism. The provided patches rectify this by adding the aforementioned dangerous modules to the blocklist within unsafe_imports. Additionally, the Global.run method was updated to correctly parse and validate module paths containing dots (e.g., multiprocessing.util), preventing a bypass of the newly strengthened import checks.

Vulnerable functions

StaticAnalyzer.unsafe_imports

fickling/fickle.py

This function is responsible for identifying unsafe imports in a pickle stream. The original implementation used an incomplete blocklist of dangerous modules. An attacker could use a module not on this list (e.g., `ctypes`, `importlib`) to execute arbitrary code, bypassing the safety check. The function would fail to yield the node for the dangerous import, leading to the pickle being incorrectly classified as safe.

Global.run

fickling/fickle.py

This function processes `GLOBAL` opcodes. The original validation only checked if the entire module string was a valid identifier, failing for module paths with dots (e.g., `multiprocessing.util`). This allowed bypassing the import checks. The patch fixes this by splitting the module path and validating each component, ensuring that checks for dangerous root modules (like `multiprocessing`) are not bypassed.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.