GHSA-m8gf-v64p-gfmg: BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py
highvulnerability
security
Summary
BabelDOC's PDF parser has a critical vulnerability where it deserializes untrusted pickle data from CMap files without proper path validation. An attacker can craft a malicious PDF with a specially encoded filename in the `/Encoding` name field (e.g., `/#2Ftmp#2Fattacker#2Fevil`, which decodes to `/tmp/attacker/evil`) that tricks the path-joining logic into loading an attacker-controlled pickle file instead of a trusted one, leading to arbitrary code execution (running attacker code with the program's permissions).
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Patch Available
Yes
Disclosure Date
July 10, 2026
Classification
Attack Type
Supply Chain
Attack SophisticationModerate
Impact (CIA+S)
confidentialityintegrity
Taxonomy References
MITRE ATLAS (AI/ML Threat Technique)
Affected Vendors
HuggingFace
Affected Packages
BabelDOC@<= 0.6.2 (fixed: 0.6.3)
Related Issues
Monthly digest — independent AI security research
Original source: https://github.com/advisories/GHSA-m8gf-v64p-gfmg
First tracked: July 10, 2026 at 08:01 PM
Classified by LLM (prompt v3) · confidence: 85%