Paper/Archive/CVE-2025-61622

CVE-2025-61622

Apache Software Foundation Apache Fory — Apache Fory, Apache Fory: Python RCE via unguarded pickle fallback serializer in pyfory

EPSS 45%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 98.8.988 × 2019.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stream that selects pickle-fallback serializer during deserialization, leading to the execution of `pickle.loads`, which is vulnerable to remote code execution. Users are recommended to upgrade to pyfory version 0.12.3 or later, which has removed pickle fallback serializer and thus fixes this issue.

Affected

ProductAffectedFixed inSource

Apache Fory0.12.0 – 0.12.2–CNA

Apache Fory0.1.0 – 0.10.3–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorylists.apache.org/thread/vfn9hp9qt06db5yo1gmj3l114o3o2csd refopenwall.com/lists/oss-security/2025/09/29/3