ply-cve-2025-56005-lab
Author
gdfurr98
Published
2026-09-27
Stars
0
Forks
0
Repository
Description
Lab demonstrating that CVE-2025-56005 is real and does allow arbitrary code execution at a minimum (the debate about RCE notwithstanding here), and shows that ply-safepickle does block the exploit path.
CVE-CVE-2025-56005 Details
Severity
CRITICAL
CVSS Score
9.8
CWE
CWE-502
Description
An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without validation. Because `pickle` allows execution of embedded code via `__reduce__()`, an attacker can achieve code execution by passing a malicious pickle file. The parameter is not mentioned in official documentation or the GitHub repository, yet...
Related PoCs for CVE-2025-56005
No other PoCs found for this CVE.