CVE-2025-69872

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

Published Feb 12, 2026

https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69872-DiskCache-Pickle-Deserialization.md https://github.com/advisories/GHSA-w8v5-vhqr-4h9v

CVSS ScoreHigh

7.0

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-69872

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.

Published Feb 12, 2026

https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69872-DiskCache-Pickle-Deserialization.md https://github.com/advisories/GHSA-w8v5-vhqr-4h9v

CVSS ScoreHigh

7.0


pypi	Jarvis-Brain	0.0.1
pypi	Jarvis-Brain	0.0.2
pypi	Jarvis-Brain	0.0.3
pypi	Jarvis-Brain	0.0.4
pypi	Jarvis-Brain	0.0.5
pypi	Jarvis-Brain	0.1.0
pypi	agent-mcp	0.1.0
pypi	agent-mcp	0.1.1
pypi	agent-mcp	0.1.2
pypi	agent-mcp	0.1.3
pypi	airtable-to-sqlite	0.0.1
pypi	airtable-to-sqlite	0.1.0
pypi	airtable-to-sqlite	0.2.0
pypi	airtable-to-sqlite	0.2.1
pypi	alfredagain	2.0.0
npm	asyncreview	0.2.0
npm	asyncreview	0.3.0
npm	asyncreview	0.4.0
npm	dash-textarea-autocomplete	1.1.0
npm	dash-textarea-autocomplete	1.3.2
pypi	diskcache	0.1.0
pypi	diskcache	0.1.2
pypi	diskcache	0.1.3
pypi	diskcache	0.1.4
pypi	diskcache	0.1.5
pypi	diskcache	0.1.6
pypi	diskcache	0.1.7
pypi	diskcache	0.1.8
pypi	diskcache	0.2.0
pypi	diskcache	0.2.10
pypi	diskcache	0.2.1
pypi	diskcache	0.2.2
pypi	diskcache	0.2.3
pypi	diskcache	0.2.4
pypi	diskcache	0.2.6
pypi	diskcache	0.2.7
pypi	diskcache	0.2.8
pypi	diskcache	0.2.9
pypi	diskcache	0.3.0
pypi	diskcache	0.3.1
pypi	diskcache	0.4.0
pypi	diskcache	0.5.0
pypi	diskcache	0.6.0
pypi	diskcache	0.7.0
pypi	diskcache	0.7.1
pypi	diskcache	0.9.0
pypi	diskcache	1.0.0
pypi	diskcache	1.1.0
pypi	diskcache	1.2.0
pypi	diskcache	1.3.1

Ecosystem	Package	Version


pypi	Jarvis-Brain	0.0.1
pypi	Jarvis-Brain	0.0.2
pypi	Jarvis-Brain	0.0.3
pypi	Jarvis-Brain	0.0.4
pypi	Jarvis-Brain	0.0.5
pypi	Jarvis-Brain	0.1.0
pypi	agent-mcp	0.1.0
pypi	agent-mcp	0.1.1
pypi	agent-mcp	0.1.2
pypi	agent-mcp	0.1.3
pypi	airtable-to-sqlite	0.0.1
pypi	airtable-to-sqlite	0.1.0
pypi	airtable-to-sqlite	0.2.0
pypi	airtable-to-sqlite	0.2.1
pypi	alfredagain	2.0.0
npm	asyncreview	0.2.0
npm	asyncreview	0.3.0
npm	asyncreview	0.4.0
npm	dash-textarea-autocomplete	1.1.0
npm	dash-textarea-autocomplete	1.3.2
pypi	diskcache	0.1.0
pypi	diskcache	0.1.2
pypi	diskcache	0.1.3
pypi	diskcache	0.1.4
pypi	diskcache	0.1.5
pypi	diskcache	0.1.6
pypi	diskcache	0.1.7
pypi	diskcache	0.1.8
pypi	diskcache	0.2.0
pypi	diskcache	0.2.10
pypi	diskcache	0.2.1
pypi	diskcache	0.2.2
pypi	diskcache	0.2.3
pypi	diskcache	0.2.4
pypi	diskcache	0.2.6
pypi	diskcache	0.2.7
pypi	diskcache	0.2.8
pypi	diskcache	0.2.9
pypi	diskcache	0.3.0
pypi	diskcache	0.3.1
pypi	diskcache	0.4.0
pypi	diskcache	0.5.0
pypi	diskcache	0.6.0
pypi	diskcache	0.7.0
pypi	diskcache	0.7.1
pypi	diskcache	0.9.0
pypi	diskcache	1.0.0
pypi	diskcache	1.1.0
pypi	diskcache	1.2.0
pypi	diskcache	1.3.1

Find vulnerabilities. Fix fast with AI.

CVE-2025-69872

CVE-2025-69872