CVE-2025-69872 - Vulnerability Analysis

Overview

DiskCache (python-diskcache) through 5.6.3 contains an insecure deserialization vulnerability caused by use of Python pickle for serialization, letting attackers with write access to the cache directory achieve arbitrary code execution when victim reads from cache.

Severity & Score

Impact

Attackers with write access to cache directory can execute arbitrary code remotely when victim reads from cache.

Mitigation

Update to the latest version that does not use insecure serialization or apply patches to avoid pickle usage.

References

• https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69872-DiskCache-Pickle-Deserialization.md
• https://github.com/grantjenks/python-diskcache

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Feb 13, 2026

🔴 CVE-2025-69872 - Critical (9.8) DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-69872/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner