Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-54071— BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

Quick assessment

Affected
funstory-ai BabelDOC
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

BabelDOC 是一款文档翻译工具。在 0.6.3 版本之前，BabelDOC 内置的 PDF 解析器（位于 ）在 加载 CMap 文件时，会反序列化不受信任的 pickle 数据。经过对路径分隔符进行解码后，PDF 控制的 Encoding 或 CMapName 值以及嵌入的 PostScript usetextoperator 可以到达该漏洞点。由于 函数仅移除了前导斜杠，攻击者可通过构造绝对路径或目录遍历序列，绕过受信任的 CMap 目录，通过 选择指向攻击者可写的 文件，从而触发 执行任意 Python

CVSS 7.8 · High EPSS 0.14% · P3

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
funstory-ai BabelDOC < 0.6.3 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-54071

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py
Source: CVE Program / CVE List V5
Vulnerability Description
BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when CMapDB._load_data() loads CMap files. PDF-controlled Encoding or CMapName values and embedded PostScript usecmap operators can reach this sink after path separators are decoded, while _normalize_cmap_name() removes only a leading slash. Absolute paths or traversal sequences can escape the trusted CMap directories through os.path.join(), select an attacker-writable .pickle.gz file, and cause pickle.loads() to execute arbitrary Python code with the privileges of the BabelDOC process. This issue is fixed in version 0.6.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
funstory-ai BabelDOC < 0.6.3 -

II. Public POCs for CVE-2026-54071

# POC Description Source Link Shenlong Link
AI-Generated POC Premium
Qwen3.6-35B-A3B · 6524 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month

III. Intelligence Information for CVE-2026-54071

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-54071 (1)

Vendor Pages for CVE-2026-54071 (1)

Other References for CVE-2026-54071 (1)

IV. Related Vulnerabilities

Same weakness: CWE-502

V. Comments for CVE-2026-54071

No comments yet

Leave a comment