提交 #797445: pytries datrie 0.8.3 Deserialization

RCE via Insecure Deserialization in datrie.Trie.load() using pickle

The datrie.Trie class relies on pickle.load() to restore its internal state when loading trie files through methods such as Trie.load(), Trie.read(), and Trie.__setstate__(). Because Python’s pickle mechanism allows execution of arbitrary code during deserialization, a specially crafted .trie file can include a malicious payload that gets executed as soon as it is loaded. This behavior is not obvious to users, since the deserialization happens implicitly within what appears to be a standard data-loading API. As a result, applications may unknowingly introduce a critical security risk.
It’s important to note that the datrie.BaseTrie class is not affected, as it does not use pickle for deserialization. However, any application that processes .trie files from untrusted sources—such as user uploads, shared storage, or external datasets—can be vulnerable to arbitrary code execution.

Note: The vendor has been notified through github public issue 15 days ago but it seems the repo is not maintained.

• 来源: ⚠️ https://github.com/pytries/datrie/issues/109
• 用户: dhabaleshwar (UID 58737)
• 提交: 2026-04-05 18時18分 (6 月前)
• 管理: 2026-04-06 23時23分 (1 day later)
• 状态: 重复
• VulDB条目: 355483 [pytries datrie 直到 0.8.3 trie File src/datrie.pyx Trie.load/Trie.read/Trie.__setstate__ 权限提升]
• 积分: 0