Vulnerability · Published Oct 17, 2025 · Assigned by GitHub_M

CVE-2025-62515Remote Code Execution by Pickle Deserialization via FlightServer in pyquokka

Critical 9.8

In plain English

A critical-severity unsafe deserialization in quokka from marsupialtail. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.9%top 40.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

pyquokka is a framework for making data lakes work for time series. In versions 0.3.1 and prior, the FlightServer class directly uses pickle.loads() to deserialize action bodies received from Flight clients without any sanitization or validation in the do_action() method. The vulnerable code is located in pyquokka/flight.py at line 283 where arbitrary data from Flight clients is directly passed to pickle.loads(). When FlightServer is configured to listen on 0.0.0.0, this allows attackers across the entire network to perform arbitrary remote code execution by sending malicious pickled payloads through the set_configs action. Additional vulnerability points exist in the cache_garbage_collect, do_put, and do_get functions where pickle.loads is used to deserialize untrusted remote data.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	pyquokka	no fix listed	GHSA-f74j-gffq-vm9p
PyPI	pyquokka	no fix listed	PYSEC-2026-503

Affected products (as reported)

Vendor	Product	Versions
marsupialtail	quokka	<= 3.0.1

Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/marsupialtail/quokka/security/advisories/GHSA-f74j-gffq-vm9p x_refsource_CONFIRM