{"data":{"id":"797f97d5-7a02-4b33-8818-79bcb9138ba0","title":"CVE-2026-14535: In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls…","summary":"In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML pass calls AnalysisContext.shorten_code(node) on every import, which marks each import as already reported in the shared reported_shortened_code set. The MLAllowlist pass then receives already_reported=True for every import and skips its allowlist check, so standard library modules outside the UNSAFE_IMPORTS denylist can pass check_safety() as LIKELY_SAFE. Because fickling.load() passes that verdict to pickle.loads(), such a payload is deserialized and executed.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-14535","publishedAt":"2026-07-04T14:16:29.063Z","cveId":"CVE-2026-14535","cweIds":["CWE-693"],"cvssScore":"8.8","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["fickling"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Trail of Bits fickling MLAllowlist bypass allows unsafe pickle deserialization","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00564,"epssCheckedAt":"2026-10-14T12:12:41.724Z","kevDateAdded":null,"advisoryAliases":["GHSA-mgx3-9w7v-8674"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:47:04.476Z","patchAvailable":null,"disclosureDate":"2026-07-04T14:16:29.063Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null}}