Qiskit SDK code execution

Also known as GHSA-6m2c-76ff-6vrf, PYSEC-2026-510, PYSEC-2026-511

Published 19 mo ago 2025-03-14 · modified 4 mo ago 2026-07-02 · JSON

CVSS

9.8

v3.1 · CNA

CISA KEV

not known exploited

EPSS

0.8%

percentile 57%

Public exploits

none known

A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation when deserialising QPY formats < 13. A python process calling Qiskit 0.18.0 through 1.4.1's `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of specially constructed payload.

CISA SSVC assessment

Exploitation: none
Automatable: yes
Technical impact: total
Assessed: 19 mo ago 2025-03-15

Exploit prediction (EPSS)

0.81% probability of exploitation in the next 30 days, higher than 57% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.1	9.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
CNA	3.1	9.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
OSV	3.1	9.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
OSV	3.1	9.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
GitHub	3.1	9.8	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Affected packages

Ecosystem	Package	Affected	Fixed in
pypi	`qiskit-terra`	>=0.18.0, <=0.46.3	no fix listed
pypi	`qiskit`	<1.4.2 >=2.0.0rc1, <2.0.0rc2	1.4.2 2.0.0rc2

Affected products

IBM Qiskit SDK

Classification

Weakness

CWE-502 Deserialization of Untrusted Data

References

ibm.com /support/pages/node/7185949 · vendor-advisory, patch
github.com /Qiskit/qiskit/security/advisories/GHSA-6m2c-76ff-6vrf · web
nvd.nist.gov /vuln/detail/CVE-2025-2000 · advisory
github.com /Qiskit/qiskit · package
pypi.org /project/qiskit-terra · package
github.com /advisories/GHSA-6m2c-76ff-6vrf · advisory
pypi.org /project/qiskit · package

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary