Product

Qiskit SDK (1.4.2-2.6.2)

1 brief RSS

IBM Qiskit SDK: Arbitrary code execution via deserialization (CVE-2026-116499)

IBM Qiskit SDK versions 1.4.2 through 2.6.2 contain a deserialization vulnerability that allows a local attacker to execute arbitrary code within the host environment.

Qiskit SDK deserialization rce python developer-tools

1t 1c 8h ago