Riskcovery

CVE-2025-61622

Apache Fory, Apache Fory: Python RCE via unguarded pickle fallback serializer in pyfory

State
Published
Severity
9.8 Critical
Published
Oct 1, 2025
Updated
Nov 4, 2025
Reserved
Sep 29, 2025

Read the record on cve.org

Description

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stream that selects pickle-fallback serializer during deserialization, leading to the execution of `pickle.loads`, which is vulnerable to remote code execution.

Users are recommended to upgrade to pyfory version 0.12.3 or later, which has removed pickle fallback serializer and thus fixes this issue.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

  • CWE-502 Deserialization of Untrusted Data

Affected Products

ProductVersions
Apache ForyApache Software Foundation
  • 0.12.0 through 0.12.2Affected
Apache ForyApache Software Foundation
  • 0.1.0 through 0.10.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.