Critical Vulnerability in Python PLY Library Enables Remote Code Execution

Cybersecuritynews •Abinaya • January 27, 2026

A critical vulnerability has been identified in the PyPI-distributed version of PLY (Python Lex-Yacc) 3.11, allowing arbitrary code execution through unsafe deserialization of untrusted pickle files. The vulnerability, assigned CVE-2025-56005, affects the undocumented picklefile parameter in the yacc() function, which remains absent from official documentation despite being present in the production release. The vulnerability stems from the yacc(picklefile=…) parameter invoking pickle.load() on attacker-controlled […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Python PLY Library Allows Remote Code Execution A critical vulnerability in the Python PLY library version 3.11 has been identified, enabling remote code execution via unsafe deserialization of untrusted pickle files. The flaw, tracked as CVE-2025-56005, affects the undocumented picklefile parameter in the yacc() function, which invokes pickle.load() on untrusted data. The vulnerability was reported by security researcher Ahmed Abd on July 1, 2025. 2 sources 68

Extracted Entities

Critical Vulnerability in Python PLY Library Enables Remote Code Execution

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)

Tools (1)