Search: CVE-2026-16760

Trail of Bits fickling versions up to 0.1.12 contain a protection mechanism failure where the _process_import() method trusts imported callables from standard library modules without verifying their behavior. This leads to unsafe calls being marked as likely safe, allowing malicious pickle payloads to execute arbitrary code or write files. The issue affects Python 3.7 through 3.12 and involves modules such as dataclasses, mailcap, and readline. The vendor has added the demonstrated unsafe modules to a denylist on the master branch but no official release patch is available yet.