{"id":"CVE-2025-2000","aliases":["GHSA-6m2c-76ff-6vrf","PYSEC-2026-510","PYSEC-2026-511"],"url":"https://o3.security/vulnerability/CVE-2025-2000","summary":"Qiskit allows arbitrary code execution decoding QPY format versions < 13","details":"A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation when deserialising QPY formats < 13. A python process calling Qiskit 0.18.0 through 1.4.1's `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of specially constructed payload.","published":"2025-03-14T13:15:40.907Z","modified":"2026-07-09T18:18:31.289949Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"qiskit-terra","fixedVersion":null},{"ecosystem":"PyPI","name":"qiskit","fixedVersion":"1.4.2"},{"ecosystem":"PyPI","name":"qiskit","fixedVersion":"2.0.0rc2"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://www.ibm.com/support/pages/node/7185949"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T18:18:31.289949Z"}}