CVE-2025-69872

Published February 11th, 2026

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

PROJECTS

Description

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

EthanKim88/ethan-cve-disclosures

Security vulnerability disclosures and advisories by Ethan Taebeom Kim (Cremit)

GitHub

grantjenks/python-diskcache

Python disk-backed cache (Django-compatible). Faster than Redis and Memcached. Pure-Python.

GitHub

2.88K