Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

PyPI package

qiskit-ibm-runtime

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 5.3PyPIAmendedPublished

    qiskit_ibm_runtime.RuntimeDecoder can execute arbitrary code

    CVE-2024-29032 · GHSA-x4x5-jv3x-9c7m

    Affected
    • PyPI qiskit-ibm-runtime >= 0.1.0, < 0.21.2
    Fixed in
    0.21.2· Vendor fix available
    Issue
    deserializing json data using qiskitibmruntime.RuntimeDecoder can be made to execute arbitrary code given a correctly formatted input string Details RuntimeDecoder is supposed to be able to deserialize JSON strings containing various special types encoded via RuntimeEncoder. However, one can structure a malicious payload to cause the decoder to spawn a subprocess and execute arbitrary code, exploiting this block of code: https://github.com/Qiskit/qiskit-ibm-runtime/blob/16e90f475e78a9d2ae77daa139ef750cfa84ca82/qiskitibmruntime/utils/json.py#L156-L159 PoC (where obviously "echo hi" can be replaced with something much more malicious) notably the following also makes it through the runtime API, with maliciousdata serialized client-side via RuntimeEncoder (and therefore presumably deserialized server-side via RuntimeDecoder?) Impact i don't know if qiskitibmruntime.RuntimeDecoder is used server-side so this may or may not be a serious vulnerability on your end (however it's…

    Recommended action: Upgrade to 0.21.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →
  2. Low, CVSS 2.8PyPIAmendedPublished

    Dynamic Variable Evaluation in qiskit-ibm-runtime

    GHSA-cq96-9974-v8hm

    Affected
    • PyPI qiskit-ibm-runtime >= 0.11.0, < 0.11.1
    Fixed in
    0.11.1· Vendor fix available
    Issue
    An eval() method exists Options.getprograminputs. This is bad in any case, but especially bad because Options are also used server side, so this has the potential to expose arbitrary code injection in runtime containers, now or at a later time. Details https://github.com/Qiskit/qiskit-ibm-runtime/blob/da94a42060f1a22e6f306227deb45b70e0075723/qiskitibmruntime/options/options.py#L140 PoC A local exploit would be something like Where print("external code") can be any arbitrary python code string. Then if you did a normal workflow and used a specifically constructed CouplingMap subclass like BadActor above: This will print external code Impact Security vulnerability.

    Recommended action: Upgrade to 0.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →