BabelDOC, a document translation tool, contains an untrusted pickle deserialization flaw in its bundled PDF parser. The flaw is triggered when the CMapDB module loads CMap files without properly validating the path name. An attacker can craft a PDF that includes a specially crafted CMap or usecmap operator which, once decoded, points to an attacker-controlled .pickle.gz file placed in the CMap directories. The pickle loader will then execute arbitrary Python code with the permissions of the running BabelDOC process, allowing full system compromise in that environment. The issue is fixed in version 0.6.3, and the vulnerability is now contained to older releases.

The vulnerability affects funstory-ai’s BabelDOC product. Any installation of BabelDOC older than version 0.6.3 is susceptible, as the code path that deserializes external pickle data remains unpatched in those releases.

The CVSS score of 7.8 indicates a high severity level. EPSS is not available, so the likelihood of exploitation cannot be quantified, but the lack of a KEV listing suggests no widespread active exploitation has been reported yet. The likely attack vector is via a malicious PDF processed by BabelDOC, which can be delivered locally or potentially over a network if BabelDOC is exposed to external PDF uploads.