EUVD-2026-30947
GHSA-9cfw-f3f9-7mm7
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization. The unmarshal_object function allows for arbitrary class instantiation and state injection by dynamically importing modules and calling __setstate__ on any class available in the Python environment. An attacker can exploit this by submitting a specially crafted JSON or CBOR payload to an application using these serializers
AnalysisAI
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deserialize attacker-controlled data via the bundled JSONSerializer or CBORSerializer. The unmarshal_object routine dynamically imports modules and invokes __setstate__ on arbitrary classes, letting an attacker pivot an untrusted payload into code execution; publicly available exploit code exists, though EPSS remains low at 0.06% (19th percentile).
Technical ContextAI
APScheduler is a widely embedded Python library for scheduling deferred and recurring jobs, often used inside web backends, data pipelines, and microservices. Its JSONSerializer and CBORSerializer reconstruct Python objects by reading a class path from the payload, importing that module at runtime, instantiating the class, and feeding attacker-controlled state into __setstate__. This is a textbook CWE-502 (Deserialization of Untrusted Data) flaw: although JSON and CBOR are themselves data-only formats, the surrounding unmarshal_object logic treats them as a serialization protocol that can resurrect arbitrary Python types, effectively reproducing the risk profile of pickle while masquerading as a 'safe' format.
RemediationAI
No vendor-released patch identified at time of analysis - neither the references nor EUVD enumerate a fixed version, so monitor https://github.com/agronholm/apscheduler for an upstream release and pin to it once published. As compensating controls, stop using JSONSerializer and CBORSerializer for any data store or transport that can receive untrusted input: switch to a serializer wrapped around a strict allowlist of permitted class paths, or move the job store to a backend the attacker cannot write to (for example a database protected by application-layer auth rather than a shared message bus). If you must keep the current serializers, place an authenticated, integrity-checked transport (mTLS or HMAC-signed payloads) in front of any endpoint that ultimately calls unmarshal_object - note this only shifts trust to the signing key and does not fix the underlying class-instantiation primitive. Audit application code for any path that feeds external HTTP, queue, or RPC bodies into APScheduler deserialization and gate it behind input validation until a patched release ships.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
Cross-user flow execution in Langflow (< 1.9.1) lets any authenticated API-key holder run another user's flow by passing
Same weakness CWE-502 – Deserialization of Untrusted Data
View allSame technique Deserialization
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Linux Enterprise High Performance Computing 12 | Fixed |
| SUSE Linux Enterprise Module for Public Cloud 12 | Fixed |
| SUSE Linux Enterprise Server 12 SP5 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | Fixed |
| SUSE Linux Enterprise Server 12 | Fixed |
| SUSE Linux Enterprise Server 12 SP3 | Fixed |
| SUSE Linux Enterprise Server 12 SP4 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 12 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | Fixed |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | Fixed |
Share
External POC / Exploit Code
Leaving vuln.today