CVE-2025-56005

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 9.8EPSS 19%

Published 2026-01-20Updated 2026-01-27

Media 10118PoC

Vulnerability details

An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without validation. Because `pickle` allows execution of embedded code via `__reduce__()`, an attacker can achieve code execution by passing a malicious pickle file. The parameter is not mentioned in official documentation or the GitHub repository, yet it is active in the PyPI version. This introduces a stealthy backdoor and persistence risk. NOTE: A third-party states that this vulnerability should be rejected because the proof of concept does not demonstrate arbitrary code execution and fails to complete successfully.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNAmitre

EPSS score history

Sources

5 links

PoC links are not available for guest users. Login to view them.

CVEShield CVE Organization RedHat Vuln DB NVD Analysis The Hacker News

Profile

CVSS

9.8

EPSS

19%

Published

2026-01-20

Updated

2026-01-27

CNA

mitre

Vendors

n/a

1 product

CPEs

cpe:/a:redhat:rhmt:1

cpe:/a:redhat:migration_toolkit_virtualization:2

cpe:/a:redhat:ocp_tools

cpe:/a:redhat:openshift_pipelines:1

cpe:/a:redhat:advanced_cluster_security:4

cpe:/a:redhat:ceph_storage:7

cpe:/a:redhat:ceph_storage:8

cpe:/a:redhat:certifications:9

cpe:/a:redhat:directory_server:13

cpe:/o:redhat:enterprise_linux:10

cpe:/o:redhat:enterprise_linux:8

cpe:/o:redhat:enterprise_linux:9

cpe:/a:redhat:enterprise_linux_ai:3

cpe:/a:redhat:openshift:4

cpe:/a:redhat:openshift_gitops:1

cpe:/a:redhat:openstack:13

cpe:/a:redhat:openstack:16.2

cpe:/a:redhat:openstack:17.1

cpe:/a:redhat:openstack:18.0

cpe:/a:redhat:quay:3

cpe:/a:redhat:workload_availability_far:0

cpe:/a:redhat:service_mesh:2

cpe:/a:redhat:service_mesh:3

cpe:/a:redhat:ansible_core:2

cpe:/o:redhat:enterprise_linux:7

cpe:/a:redhat:openshift_data_foundation:4

cpe:/a:redhat:stf:1.5

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated