CVE-2025-2000: Qiskit Arbitrary Code Execution Vulnerability in QPY Format < 13
Summary
CVE-2025-2000: Qiskit allows arbitrary code execution decoding QPY format versions < 13. Affects qiskit versions >= 2.0.0rc1, < 2.0.0rc2. Fixed in 2.0.0rc2. How to fix ↓
Also tracked for
- qiskit-terra · PyPI
- qiskit-terra · PyPI
The same CVE-2025-2000 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Qiskit is an open-source quantum computing software development framework that allows users to create and execute quantum algorithms. It provides tools for working with quantum circuits, simulators, and real quantum devices. The framework supports various file formats, including QPY, which is used for serializing quantum circuits. However, vulnerabilities in the deserialization process of QPY files can lead to severe security risks, such as arbitrary code execution.
Vulnerability Detail
The vulnerability arises from the deserialization of maliciously crafted QPY files in versions prior to 13. When a Python process uses Qiskit's 'qiskit.qpy.load()' function to load these files, it can inadvertently execute arbitrary Python code embedded within the payload. This poses a significant security risk as it allows attackers to execute harmful code without requiring elevated privileges, potentially compromising the system's integrity and confidentiality.
How To Fix
Latest published version: 2.6.1 as of 23 Oct 2026
pip install --upgrade "qiskit==2.6.1"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2.0.0rc2
This is the first release that contains the fix.
pip install --upgrade "qiskit==2.0.0rc2"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid loading QPY files from untrusted sources or consider using alternative serialization formats that do not have this vulnerability until you can update to a secure version.
Conclusion
The Qiskit vulnerability identified as CVE-2025-2000 poses a significant risk due to the potential for arbitrary code execution through malicious QPY files. Users are strongly advised to update to the latest version to mitigate this risk and ensure the security of their quantum computing applications.
See every vulnerability recorded for qiskit →
FAQ
The CVSS score of this vulnerability is 9.8, indicating a critical level of severity.
Qiskit versions prior to 2.0.0rc2 are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If you cannot update immediately, avoid loading QPY files from untrusted sources as a temporary measure.
No, this vulnerability does not require privilege escalation; it allows arbitrary code execution at the same privilege level as the running process.
Related vulnerabilities
Recent vulnerabilities recorded for qiskit.
