Description
A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation when deserialising QPY formats < 13. A python process calling Qiskit 0.18.0 through 1.4.1's `qiskit.qpy.load()` function could potentially execute any arbitrary Python code embedded in the correct place in the binary file as part of specially constructed payload.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Qiskit SDK | 0.18.0 – ≤ 1.4.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | qiskit | < 1.4.2 | 1.4.2 | GHSA-6m2c-76ff-6vrf |
| PyPI | qiskit | >= 2.0.0rc1, < 2.0.0rc2 | 2.0.0rc2 | GHSA-6m2c-76ff-6vrf |
| PyPI | qiskit | < 1.4.2 · >= 2.0.0rc1, < 2.0.0rc2 | 1.4.2, 2.0.0rc2 | PYSEC-2026-510 |
| PyPI | qiskit-terra | >= 0.18.0, <= 0.46.3 | — | GHSA-6m2c-76ff-6vrf |
References
- https://www.ibm.com/support/pages/node/7185949 vendor-advisory patch