CVE-2026-116500 · Package
NO FIX YET
IBM Qiskit SDK versions 2.4.0 through 2.6.1 recurse without a bound when deserializing QPY payloads. A local attacker who supplies a crafted QPY file can make the process fail with a denial of service.
first public Nov 8, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams that run Qiskit 2.4.0 through 2.6.1 and load QPY files or payloads from untrusted sources can be hit. Systems that only load circuits they created themselves are unlikely to be exposed. The sources do not say which fixed version to move to.
Not affected if other-versions, trusted-input-only
Who cares python, qiskit
pip show qiskitNo fix yet, per the sources.
IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to cause a denial of service due to unbound recursion during deserialization of untrusted QPY payloads.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.