Junglewise Threat Intelligence

CVE-2025-61765: PYSEC-2026-1854 - python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deploym

CVE-2025-61765 · Severity: low · CVSS 3.1 · Published 2026-07-07

Vendors: PyPI.

Executive brief

python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

Affected products

PyPI python-socketio

Related threats

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary `EVENT` and