CVE-2026-22608
Critical · 9.8Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection
CVSS
9.8
EPSS
0.4%
Published
Jan 9, 2026
CISA due date
—
The record
Both ctypes and pydoc modules arent explictly blocked. Even other existing pickle scanning tools (like picklescan) do not block pydoc.locate. Chaining these two together can achieve RCE while the scanner still reports the file as LIKELY_SAFE
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | fickling | 0 | 0.1.7 |
Related vulnerabilities
- GHSA-5hvc-6wx8-mvv4 Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection Same vulnerability
- GHSA-5hwf-rc88-82xm Fickling missing RCE-capable modules in UNSAFE_IMPORTS Also affects fickling
- GHSA-wccx-j62j-r448 Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain… Also affects fickling
- GHSA-mhc9-48gj-9gp3 Fickling has safety check bypass via REDUCE+BUILD opcode sequence Also affects fickling
- GHSA-mxhj-88fx-4pcv Fickling: OBJ opcode call invisibility bypasses all safety checks Also affects fickling
- GHSA-83pf-v6qq-pwmr Fickling has a detection bypass via stdlib network-protocol constructors Also affects fickling
- GHSA-h4rm-mm56-xf63 Fickling vulnerable to detection bypass due to "builtins" blindness Also affects fickling
- GHSA-q5qq-mvfm-j35x Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist Also affects fickling