HighVulnerability

GHSA-m8gf-v64p-gfmg: BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

Source: GitHub Advisory(opens in a new tab)
Identifiers: CVE-2026-54071GHSA-m8gf-v64p-gfmg
Published: July 10, 2026
Record updated: October 9, 2026

Affected: BabelDOC <= 0.6.2
Fixed in: 0.6.3
Known exploitation: Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
EPSS: 0.4%

Summary

BabelDOC's vendored PDF parser deserializes untrusted pickle data when loading CMap files, in `babeldoc/pdfminer/cmapdb.py`. A PDF-controlled CMap name is passed to `os.path.join()` and `pickle.loads()` after only NUL bytes are stripped, so a hex-encoded absolute path in a crafted PDF's `/Encoding` name can redirect deserialization to an attacker-writable `.pickle.gz` file, giving arbitrary Python code execution with the privileges of the BabelDOC process.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Details

Scores and exploitation

Patch available: Yes
EPSS: 0.4%Estimated probability that this CVE is exploited in the next 30 days, from the FIRST Exploit Prediction Scoring System. Read on October 13, 2026.
Disclosure date: July 10, 2026

Affected

Packages: BabelDOC@<= 0.6.2 (fixed: 0.6.3)

Classification

Attack type: Other
Attack sophistication: Moderate
AI component targeted: Framework
Impact: Confidentiality,
Integrity,
Availability
Labels: security

How this record was produced

Summaries, mitigations and labels on this page are generated automatically from the source. The linked source is authoritative.

Original source: https://github.com/advisories/GHSA-m8gf-v64p-gfmg

First tracked: July 10, 2026 at 08:01 PM ET, from GitHub Advisory Database

Classifier: claude-haiku-5-5, prompt v4

Classifier confidence: 70% (self-assessed)

Topics

Model and package supply chain

Summary

Mitigation

Topics

Related items