tiny-rdm Tiny RDM Pickle Decoding pickle_convert.go pickle.loads deserialization_CVE-2025-14606

2.3 / 10

LOW

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickle_convert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Basic Information

ID CVE-2025-14606

Source VulDB

Published Dec 13, 2025 at 12:32

Affected Product

Vendor tiny-rdm

Product Tiny RDM

Version 1.2.0

Affected Versions tiny-rdm Tiny RDM 1.2.0
tiny-rdm Tiny RDM 1.2.1
tiny-rdm Tiny RDM 1.2.2
tiny-rdm Tiny RDM 1.2.3
tiny-rdm Tiny RDM 1.2.4
tiny-rdm Tiny RDM 1.2.5

CWE Classification

CWE-502 CWE-20

References

{
    "lastseen": "",
    "description": "A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the function pickle.loads of the file pickle_convert.go of the component Pickle Decoding. The manipulation leads to deserialization. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.",
    "published": "2025-12-13T12:32:06.262Z",
    "modified": "2025-12-13T12:32:06.262Z",
    "type": "cve",
    "title": "tiny-rdm Tiny RDM Pickle Decoding pickle_convert.go pickle.loads deserialization",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.336282\nhttps://vuldb.com/?ctiid.336282\nhttps://vuldb.com/?submit.704138\nhttps://github.com/tiny-craft/tiny-rdm/issues/512",
    "id": "CVE-2025-14606",
    "bulletinFamily": "",
    "cwe": [
        "CWE-502",
        "CWE-20"
    ],
    "cvelist": null,
    "sourceData": "tiny-rdm Tiny RDM 1.2.0\ntiny-rdm Tiny RDM 1.2.1\ntiny-rdm Tiny RDM 1.2.2\ntiny-rdm Tiny RDM 1.2.3\ntiny-rdm Tiny RDM 1.2.4\ntiny-rdm Tiny RDM 1.2.5",
    "sourceHref": "",
    "cvss": {
        "score": 2.3,
        "severity": "LOW",
        "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Tiny RDM",
    "version": "1.2.0",
    "vendor": "tiny-rdm",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}