Skip to content
Fencer Vulns
critical 9.8

CVE-2025-56005 in the critical feed json

An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parame…

published 2026-01-20 9 mo ago modified 2026-09-17 52 d ago also EUVD-2026-3342

cvss
9.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
18.8%
EPSS 18.8% chance of exploitation in 30 days, percentile 97%
public exploits
0
none known

Summary

An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without validation. Because `pickle` allows execution of embedded code via `__reduce__()`, an attacker can achieve code execution by passing a malicious pickle file. The parameter is not mentioned in official documentation or the GitHub repository, yet it is active in the PyPI version. This introduces a stealthy backdoor and persistence risk. NOTE: A third-party states that this vulnerability should be rejected because the proof of concept does not demonstrate arbitrary code execution and fails to complete successfully.

Patch / fix

  • python-jsonpath-ng openSUSE Tumbleweed 1.8.0-1.1

opensuse advisories openSUSE-SU-2026:10418-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-56005 updated cvss 7.8

ply: python-ply: Unsafe pickle file handling in Ply

  • Red Hat Migration Toolkit for Containers ansible-automation-platform-24/controller-rhel8-operator Red Hat Migration Toolkit for Virtualization mtv-candidate/mtv-rhel9-operator, mtv-candidate/mtv-must-gather-rhel8, migration-toolkit-virtualization/mtv-rhel9-operator, migration-toolkit-virtualization/mtv-must-gather-rhel8
    affected: workaround, no fix planned “Will not fix”
  • Red Hat OpenShift Developer Tools and Services ocp-tools-4/jenkins-agent-base-rhel8
    affected: workaround, no fix available
  • Red Hat OpenShift Pipelines openshift-pipelines/pipelines-hub-ui-rhel8, openshift-pipelines/pipelines-console-plugin-rhel8 Red Hat Advanced Cluster Security 4 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-scanner-db-rhel8, advanced-cluster-security/rhacs-scanner-v4-db-rhel8, advanced-cluster-security/rhacs-scanner-db-slim-rhel8
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Ceph Storage 7 rhceph/rhceph-promtail-rhel9 Red Hat Ceph Storage 8 rhceph/rhceph-8-rhel9 Red Hat Certification Program for Red Hat Enterprise Linux 9 rhcertification/redhat-certification-baremetal, rhcertification/redhat-certification-system-ai Red Hat Directory Server 13 dirsrv/dirsrv-rhel10 Red Hat Enterprise Linux 8 postgresql-13, ubi8/httpd-24, rhel8/httpd-24, rhel8/mysql-80, ubi8/nginx-122, ubi8/nginx-124, +10 more Red Hat Enterprise Linux 9 rhel9/keylime-verifier, rhel9/keylime-registrar
    +1 more products
    Red Hat Enterprise Linux 10 rhel10/keylime-verifier, rhel10/keylime-registrar
    affected: workaround, no fix available
  • Red Hat Enterprise Linux AI (RHEL AI) 3 rhelai3/bootc-cuda-rhel9, rhelai3/bootc-aws-cuda-rhel9, rhelai3/bootc-gcp-cuda-rhel9, rhelai3/bootc-azure-cuda-rhel9
    affected: workaround, no fix planned “Will not fix”
  • Red Hat OpenShift Container Platform 4 openshift4/ironic, openshift4/ironic-agent, openshift4/ose-ansible-operator
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat OpenShift GitOps openshift-gitops-1/console-plugin-rhel8
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Quay 3 quay/clair-rhel8 Red Hat Service Telemetry Framework 1.5 stf/prometheus-webhook-snmp-rhel8
    affected: workaround, no fix available
show 10 more
  • Red Hat Fence Agents Remediation Operator custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator Red Hat Migration Toolkit for Containers rhmtc/openshift-migration-hook-runner-rhel8
    not affected: vulnerable code not present
  • Red Hat OpenShift Developer Tools and Services ocp-tools-4/jenkins-rhel8
    not affected: vulnerable code not in execute path
  • Red Hat OpenShift Service Mesh 2 ratelimit-rhel8, openshift-service-mesh/pilot-rhel8, openshift-service-mesh/grafana-rhel8, openshift-service-mesh/proxyv2-rhel9, openshift-service-mesh/istio-cni-rhel8, openshift-service-mesh/kiali-ossmc-rhel8, +3 more
    not affected: component not present
  • Red Hat OpenShift Service Mesh 3 openshift-service-mesh/kiali-rhel9-operator Red Hat Ansible Automation Platform Ansible Core 2 ee-minimal-rhel8, ee-minimal-rhel9
    not affected: vulnerable code not present
  • Red Hat Enterprise Linux 7 python-ply Red Hat Enterprise Linux 8 python-ply, python38-ply, python39-ply Red Hat Enterprise Linux 9 python3-ply Red Hat Enterprise Linux 10 python-ply
    not affected: vulnerable code not in execute path
  • Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-8, openshift/ose-rhel-coreos-9
    not affected: vulnerable code not present
  • Red Hat Openshift Data Foundation 4 odf4/cephcsi-rhel9, odf4/rook-ceph-rhel9-operator, odf4/ocs-metrics-exporter-rhel9
    not affected: vulnerable code not in execute path
  • Red Hat OpenShift GitOps openshift-gitops-1/must-gather-rhel8
    not affected: vulnerable code cannot be controlled by adversary
  • Red Hat OpenStack Platform 13 (Queens) openstack-base, openstack-redis, openstack-horizon, openstack-heat-api, openstack-keystone, openstack-redis-base, +106 more
    not affected: component not present
  • Red Hat OpenStack Platform 16.2 openstack-heat-api, openstack-keystone, openstack-heat-api-cfn, openstack-neutron-base, openstack-nova-compute, openstack-swift-account, +93 more Red Hat OpenStack Platform 17.1 openstack-heat-api, openstack-keystone, openstack-heat-api-cfn, openstack-neutron-base, openstack-nova-compute, openstack-swift-account, +88 more Red Hat OpenStack Platform 18.0 openstack-tempest-rhel9, openstack-heat-api-rhel9, openstack-keystone-rhel9, openstack-tempest-all-rhel9, rhoso/openstack-swift-rhel9, openstack-heat-api-cfn-rhel9, +76 more Red Hat Quay 3 quay-rhel9 Red Hat Service Telemetry Framework 1.5 prometheus-webhook-snmp-rhel9, stf/smart-gateway-rhel9-operator, stf/service-telemetry-rhel9-operator
    not affected: vulnerable code not in execute path

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
total
Assessed
9 mo ago

Exploit prediction

18.81% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • github.com https://github.com/bohmiiidd/Undocumented-RCE-in-PLY referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/tom025/ply_exploit_rejection referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/bohmiiidd/Undocumument_RCE_PLY-yacc-CVE-2025-56005 referenced PoC, tagged "exploit" by a source, unverified
  • openwall.com http://www.openwall.com/lists/oss-security/2026/01/23/4 referenced PoC, tagged "exploit" by a source, unverified
  • openwall.com http://www.openwall.com/lists/oss-security/2026/01/28/5 referenced PoC, tagged "exploit" by a source, unverified
  • openwall.com http://www.openwall.com/lists/oss-security/2026/01/29/1 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Red Hat Fence Agents Remediation Operator
  • Red Hat Migration Toolkit for Containers
  • Red Hat Migration Toolkit for Virtualization
  • Red Hat OpenShift Developer Tools and Services
  • Red Hat OpenShift Pipelines
  • Red Hat OpenShift Service Mesh 2
  • Red Hat OpenShift Service Mesh 3
  • Red Hat Red Hat Advanced Cluster Security 4
  • Red Hat Red Hat Ansible Automation Platform Ansible Core 2
  • Red Hat Red Hat Ceph Storage 7
  • Red Hat Red Hat Ceph Storage 8
  • Red Hat Red Hat Certification Program for Red Hat Enterprise Linux 9
  • Red Hat Red Hat Directory Server 13
  • Red Hat Red Hat Enterprise Linux 10
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat Openshift Data Foundation 4
  • Red Hat Red Hat OpenShift GitOps
  • Red Hat Red Hat OpenStack Platform 13 (Queens)
  • Red Hat Red Hat OpenStack Platform 16.2
  • Red Hat Red Hat OpenStack Platform 17.1
  • Red Hat Red Hat OpenStack Platform 18.0
  • Red Hat Red Hat Quay 3
  • Red Hat Service Telemetry Framework 1.5

Classification

Weakness
  • CWE-502 Deserialization of Untrusted Data

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.