CVE-2025-46183 Deserialization in n/a
An attacker can execute arbitrary code on the target system by providing a specially crafted .ser file to pgCodeKeeper.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-46183?
CVE-2025-46183 is a high-severity unsafe deserialization vulnerability in n/a, published on 24 Oct 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Utils.deserialize function in pgCodeKeeper 10.12.0 processes serialized data from untrusted sources. If an attacker provides a specially crafted .ser file, deserialization may result in unintended code execution or other malicious behavior on the target system.
Weakness: CWE-502
Which versions are affected by CVE-2025-46183?
How do I fix CVE-2025-46183?
No fix has been published for CVE-2025-46183 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2025-46183 being exploited?
There is no known exploitation of CVE-2025-46183 in the wild and no public exploit code.
Sources
Also known as GHSA-762j-pphq-5gmg.