CVE-2025-56005Critical· 9.8▾ Midnight

An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function

An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pick…

▾ Midnight zone — Critical, or high with PoC / in-the-wild

Depth score57/ 100 · Moderate

impact 53.9 · likelihood 3.4 · exploitation 0

🔒

Full detail requires an account

The latest CVEs are free to read. CVE-2025-56005 is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.