« Volver al listado

CVE-2026-14534

Estado: AnalizadaAlta (8.8)—

Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because these modules are absent from the denylist, fickling's check_safety() function returns LIKELY_SAFE with zero findings for pickle payloads that invoke dangerous functions including _posixsubprocess.fork_exec (C-level process spawner capable of executing arbitrary binaries), site.execsitecustomize (executes arbitrary site customization code), and atexit._run_exitfuncs (triggers all registered exit handler callbacks). The fickling.load() API chains check_safety() into pickle.loads() as an explicit security gate; a LIKELY_SAFE verdict causes the payload to be deserialized and executed. This shares the same root cause as CVE-2026-22607 (cProfile), CVE-2025-67748 (pty), and CVE-2025-67747 (marshal/types). OvertlyBadEvals does not flag these modules because they are standard library imports. UnsafeImports does not flag them because they are not in the denylist. The UnusedVariables heuristic is defeated by the SETITEMS opcode pattern.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

UI:R (interacción necesaria) en vector CVSS indica cliente. CWE-502 (deserialización insegura de pickle) permite ejecución de código mediante módulos no validados (_posixsubprocess.fork_exec, atexit) tras check_safety() incorrecto.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Execution PreventionApplication Isolation and SandboxingExploit ProtectionUpdate SoftwareThreat Intelligence ProgramRestrict Web-Based Content

Tecnologías afectadas (1)

Trailofbits — Fickling

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-14534",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-14534",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-07-06T14:59:25.631510Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "aa17e1a1-c329-4d6e-a1ed-8d0188aea082",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "aa17e1a1-c329-4d6e-a1ed-8d0188aea082",
      "affectedData": [
        {
          "vendor": "trailofbits",
          "product": "fickling",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "0.1.10"
            },
            {
              "status": "unaffected",
              "version": "0.1.11",
              "versionType": "custom"
            }
          ],
          "packageName": "fickling",
          "collectionURL": "https://pypi.org/project/fickling/",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2026-07-04T14:16:28.400",
  "references": [
    {
      "url": "https://github.com/trailofbits/fickling/commit/e8408615b63adf034f891f653692ab9b51f0f5af",
      "tags": [
        "Patch"
      ],
      "source": "aa17e1a1-c329-4d6e-a1ed-8d0188aea082"
    },
    {
      "url": "https://github.com/trailofbits/fickling/pull/272",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "source": "aa17e1a1-c329-4d6e-a1ed-8d0188aea082"
    },
    {
      "url": "https://github.com/trailofbits/fickling/releases/tag/v0.1.11",
      "tags": [
        "Release Notes"
      ],
      "source": "aa17e1a1-c329-4d6e-a1ed-8d0188aea082"
    },
    {
      "url": "https://github.com/trailofbits/fickling/security/advisories/GHSA-m6fh-58r7-x697",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "aa17e1a1-c329-4d6e-a1ed-8d0188aea082"
    },
    {
      "url": "https://github.com/trailofbits/fickling/security/advisories/GHSA-m6fh-58r7-x697",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "aa17e1a1-c329-4d6e-a1ed-8d0188aea082",
      "description": [
        {
          "lang": "en",
          "value": "CWE-184"
        },
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because these modules are absent from the denylist, fickling's check_safety() function returns LIKELY_SAFE with zero findings for pickle payloads that invoke dangerous functions including _posixsubprocess.fork_exec (C-level process spawner capable of executing arbitrary binaries), site.execsitecustomize (executes arbitrary site customization code), and atexit._run_exitfuncs (triggers all registered exit handler callbacks). The fickling.load() API chains check_safety() into pickle.loads() as an explicit security gate; a LIKELY_SAFE verdict causes the payload to be deserialized and executed. This shares the same root cause as CVE-2026-22607 (cProfile), CVE-2025-67748 (pty), and CVE-2025-67747 (marshal/types). OvertlyBadEvals does not flag these modules because they are standard library imports. UnsafeImports does not flag them because they are not in the denylist. The UnusedVariables heuristic is defeated by the SETITEMS opcode pattern."
    }
  ],
  "lastModified": "2026-07-10T15:10:15.827",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trailofbits:fickling:*:*:*:*:*:python:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D2B4444-58DC-4227-BBD7-D68FB61FA761",
              "versionEndIncluding": "0.1.10"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "aa17e1a1-c329-4d6e-a1ed-8d0188aea082"
}