Read the docs
TI-2026-35617 Aliases CVE-2026-48207GHSA-m5gw-83w2-7749

Apache Fory: PyFory ReduceSerializer Incomplete Policy Enforcement

Priority MEDIUM 50CWE-502Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and GitHub. Impact type from CWE-502.

Summary

Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented DeserializationPolicy validation hooks during reduce-state restoration and global-name resolution. An application is vulnerable if it deserializes attacker-controlled data using PyFory Python-native mode with strict mode disabled and relies on DeserializationPolicy to restrict unsafe classes, functions, or module attributes. This issue affects Apache Fory: from before 1.0.0. Mitigation: Users of Apache Fory are recommended to upgrade to version 1.0.0 or later, which enforces DeserializationPolicy validation for the affected ReduceSerializer paths and thus fixes this issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00574 47th percentileScored 2026-11-07
Fix Fixed Apache Fory (Apache Software Foundation): 1.0.0pyfory (PyPI): 1.0.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ApacheApache Fory0.13.0 to before 1.0.01.0.0Patch availableCNA
—pyfory (PyPI)0.13.0 to before 1.0.01.0.0Patch availableGHSA-m5gw-83w2-7749
  • Apache Fory VendorApache Affected 0.13.0 to before 1.0.0 Fixed in 1.0.0 Patch available CNA
  • pyfory (PyPI) Vendor— Affected 0.13.0 to before 1.0.0 Fixed in 1.0.0 Patch available GHSA-m5gw-83w2-7749

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:apache:fory:*:*:*:*:*:*:*:*0.13.0 to before 1.0.0VulnerableApache
  • cpe:2.3:a:apache:fory:*:*:*:*:*:*:*:* Versions 0.13.0 to before 1.0.0 Vulnerable ·Apache

Remediation

  • Fix · CNA Apache Fory (Apache Software Foundation) Fixed in 1.0.0
  • Fix · GHSA-m5gw-83w2-7749 pyfory (PyPI) Fixed in 1.0.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-48207
  2. 2026-10-03 Alias added: GHSA-m5gw-83w2-7749
  3. 2026-10-25 EPSS moved to the below the 50th percentile

References

Advisory 3

Other 1

  • TI-2025-38065 Apache Fory, Apache Fory: Python RCE via unguarded pickle fallback serializer in pyfory CVSS 3.1CRITICAL 9.8
  • TI-2026-50130 Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserialization CVSS 3.1CRITICAL 9.8
  • TI-2026-46171 Apache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip paths CVSS 3.1CRITICAL 9.8
  • TI-2026-46169 Apache Fory, Apache Fory: Class-registration bypass through an auto-admitted SerializedLambda capturing interface CVSS 3.1CRITICAL 9.8
  • TI-2026-50132 Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path CVSS 3.1CRITICAL 9.1
  • TI-2026-36874 Apache Fory: Java ReplaceResolverSerializer deserialization checks bypass CVSS 3.1CRITICAL 9.1
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences