CVE-2025-61765
python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
Description
python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use for internal communications. When Socket.IO servers are configured to use a message queue backend such as Redis for inter-server communication, messages sent between the servers are encoded using the `pickle` Python module. When a server receives one of these messages through the message queue, it assumes it is trusted and immediately deserializes it. The vulnerability stems from deserialization of messages using Python's `pickle.loads()` function. Having previously obtained access to the message queue, the attacker can send a python-socketio server a crafted pickle payload that executes arbitrary code during deserialization via Python's `__reduce__` method. This vulnerability only affects deployments with a compromised message queue. The attack can lead to the attacker executing random code in the context of, and with the privileges of a Socket.IO server process. Single-server systems that do not use a message queue, and multi-server systems with a secure message queue are not vulnerable. In addition to making sure standard security practices are followed in the deployment of the message queue, users of the python-socketio package can upgrade to version 5.14.0 or newer, which remove the `pickle` module and use the much safer JSON encoding for inter-server messaging.
INFO
Published Date :
Oct. 6, 2025, 4:15 p.m.
Last Modified :
Oct. 9, 2026, 10:10 a.m.
Remotely Exploit :
No
Source :
[email protected]
Affected Products
The following products are affected by CVE-2025-61765
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
No affected product recoded yet
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Upgrade python-socketio to version 5.14.0 or newer.
- Ensure message queue security practices are followed.
Public PoC/Exploit Available at Github
CVE-2025-61765 has a 2 public
PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2025-61765.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2025-61765 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2025-61765
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Proof of Concept of an unsafe pickle deserialization vulnerability in Socket.IO
poc deserialization-vulnerability exploits pickle
Python
A tool to scan open source code-bases for simple patterns
Python Makefile Shell
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-61765 vulnerability anywhere in the article.
-
The Hacker News
ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & More
Criminals don’t need to be clever all the time; they just follow the easiest path in: trick users, exploit stale components, or abuse trusted systems like OAuth and package registries. If your stack o ... Read more
The following table lists the changes that have been made to the
CVE-2025-61765 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Oct. 09, 2026
Action Type Old Value New Value Added Translation Title: python-socketio de miguelgrinberg, Description: python-socketio es una implementación en Python del cliente y servidor en tiempo real de Socket.IO. Una vulnerabilidad de ejecución remota de código en versiones de python-socketio anteriores a la 5.14.0 permite a los atacantes ejecutar código Python arbitrario a través de la deserialización maliciosa de pickle en implementaciones multi-servidor en las que el atacante obtuvo previamente acceso a la cola de mensajes que los servidores utilizan para comunicaciones internas. Cuando los servidores de Socket.IO están configurados para usar un backend de cola de mensajes como Redis para la comunicación entre servidores, los mensajes enviados entre los servidores se codifican usando el módulo Python 'pickle'. Cuando un servidor recibe uno de estos mensajes a través de la cola de mensajes, asume que es de confianza y lo deserializa inmediatamente. La vulnerabilidad se deriva de la deserialización de mensajes usando la función 'pickle.loads()' de Python. Habiendo obtenido previamente acceso a la cola de mensajes, el atacante puede enviar a un servidor python-socketio una carga útil de pickle manipulada que ejecuta código arbitrario durante la deserialización a través del método '__reduce__' de Python. Esta vulnerabilidad solo afecta a implementaciones con una cola de mensajes comprometida. El ataque puede llevar a que el atacante ejecute código aleatorio en el contexto y con los privilegios de un proceso de servidor de Socket.IO. Los sistemas de un solo servidor que no usan una cola de mensajes, y los sistemas multi-servidor con una cola de mensajes segura no son vulnerables. Además de asegurarse de que se sigan las prácticas de seguridad estándar en la implementación de la cola de mensajes, los usuarios del paquete python-socketio pueden actualizar a la versión 5.14.0 o más reciente, que elimina el módulo 'pickle' y utiliza la codificación JSON mucho más segura para la mensajería entre servidores. -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'miguelgrinberg', 'product': 'python-socketio', 'versions': [{'status': 'affected', 'version': '>= 0.8.0, < 5.14.0'}]}] -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added SSVC {'id': 'CVE-2025-61765', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'no'}, {'technicalImpact': 'total'}], 'version': '2.0.3', 'timestamp': '2025-10-06T17:01:42.908222Z'} -
CVE Modified by [email protected]
Oct. 22, 2025
Action Type Old Value New Value Added Reference https://www.bluerock.io/post/cve-2025-61765-bluerock-discovers-critical-rce-in-socket-io-ecosystem -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Oct. 22, 2025
Action Type Old Value New Value Added Reference https://www.bluerock.io/post/cve-2025-61765-bluerock-discovers-critical-rce-in-socket-io-ecosystem -
New CVE Received by [email protected]
Oct. 06, 2025
Action Type Old Value New Value Added Description python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use for internal communications. When Socket.IO servers are configured to use a message queue backend such as Redis for inter-server communication, messages sent between the servers are encoded using the `pickle` Python module. When a server receives one of these messages through the message queue, it assumes it is trusted and immediately deserializes it. The vulnerability stems from deserialization of messages using Python's `pickle.loads()` function. Having previously obtained access to the message queue, the attacker can send a python-socketio server a crafted pickle payload that executes arbitrary code during deserialization via Python's `__reduce__` method. This vulnerability only affects deployments with a compromised message queue. The attack can lead to the attacker executing random code in the context of, and with the privileges of a Socket.IO server process. Single-server systems that do not use a message queue, and multi-server systems with a secure message queue are not vulnerable. In addition to making sure standard security practices are followed in the deployment of the message queue, users of the python-socketio package can upgrade to version 5.14.0 or newer, which remove the `pickle` module and use the much safer JSON encoding for inter-server messaging. Added CVSS V3.1 AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L Added CWE CWE-502 Added Reference https://github.com/miguelgrinberg/python-socketio/commit/53f6be094257ed81476b0e212c8cddd6d06ca39a Added Reference https://github.com/miguelgrinberg/python-socketio/security/advisories/GHSA-g8c6-8fjj-2r4m