CVE-2026-22612
Critical · 9.8Fickling vulnerable to detection bypass due to "builtins" blindness
CVSS
9.8
EPSS
0.3%
Published
Jan 9, 2026
CISA due date
—
The record
Fickling works by Pickle bytecode --> AST --> Security analysis However while going from bytecode to AST, some import nodes are removed which blinds the security analysis fickling/fickling/fickle.py ```python def run(self, interpreter: Interpreter): module, attr = self.module, self.attr if module in ("__builtin__", "__builtins__", "builtins"):
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | fickling | 0 | 0.1.7 |
Related vulnerabilities
- GHSA-h4rm-mm56-xf63 Fickling vulnerable to detection bypass due to "builtins" blindness Same vulnerability
- GHSA-5hwf-rc88-82xm Fickling missing RCE-capable modules in UNSAFE_IMPORTS Also affects fickling
- GHSA-wccx-j62j-r448 Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain… Also affects fickling
- GHSA-mhc9-48gj-9gp3 Fickling has safety check bypass via REDUCE+BUILD opcode sequence Also affects fickling
- GHSA-mxhj-88fx-4pcv Fickling: OBJ opcode call invisibility bypasses all safety checks Also affects fickling
- GHSA-83pf-v6qq-pwmr Fickling has a detection bypass via stdlib network-protocol constructors Also affects fickling
- GHSA-q5qq-mvfm-j35x Fickling has Static Analysis Bypass via Incomplete Dangerous Module Blocklist Also affects fickling
- GHSA-5hvc-6wx8-mvv4 Fickling vulnerable to use of ctypes and pydoc gadget chain to bypass detection Also affects fickling