Executive brief
Qiskit allows arbitrary code execution decoding QPY format versions < 13
Affected products
- PyPI qiskit-terra
- PyPI qiskit
Junglewise Threat Intelligence
CVE-2025-2000 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: qiskit (PyPI). Vendors: PyPI.
Qiskit allows arbitrary code execution decoding QPY format versions < 13