{"id":"CVE-2025-2000","aliases":["GHSA-6m2c-76ff-6vrf"],"title":"Qiskit allows arbitrary code execution decoding QPY format versions < 13","summary":"Qiskit allows arbitrary code execution decoding QPY format versions < 13","severity":"critical","cvss":9.8,"cwe":["CWE-502"],"vendor":"qiskit-terra","product":"qiskit-terra","ecosystem":"pip","affected":["qiskit-terra >= 0.18.0, <= 0.46.3","qiskit <= 1.4.1","qiskit = 2.0.0rc1"],"patched":["qiskit 1.4.2","qiskit 2.0.0rc2"],"published":"2025-03-14","updated":"2026-11-04","sourceUpdated":"2026-11-04T16:26:24Z","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-6m2c-76ff-6vrf","references":[{"url":"https://github.com/Qiskit/qiskit/security/advisories/GHSA-6m2c-76ff-6vrf"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2000"},{"url":"https://www.ibm.com/support/pages/node/7185949"},{"url":"https://github.com/advisories/GHSA-6m2c-76ff-6vrf"}],"tags":["ghsa","pip"],"epss":0.0081,"epssPercentile":0.57146,"ingestedAt":"2026-11-04T17:19:45.136Z","slug":"CVE-2025-2000","body":"## Overview\n\n### Impact\n\nA maliciously crafted QPY file can potentially execute arbitrary-code embedded in the payload without privilege escalation when deserializing QPY formats < 13. A python process calling Qiskit's `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of a specially constructed payload.\n\n### Patches\n\nFixed in Qiskit 1.4.2 and in Qiskit 2.0.0rc2\n\n## Affected packages\n\n- `qiskit-terra >= 0.18.0, <= 0.46.3`\n- `qiskit <= 1.4.1`\n- `qiskit = 2.0.0rc1`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `qiskit 1.4.2`\n- `qiskit 2.0.0rc2`","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}