parquet-rce-poc-CVE-2025-30065

CVE-2025-30065 This repository illustrates how to exploit CVE-2025-30065 and achieve remote class instantiation and trigger a network request from within the victim application i.e the JVM thereby achieving SSRF. The generated parquet in Malicious.java assumes that the class RCEPayload.java is...

CVE-2025-30065

💥 CVE-2025-30065 - Parquet Deserialization PoC This project demonstrates a safe proof-of-concept for CVE-2025-30065 using Apache Parquet and Java deserialization. When a Parquet file containing a serialized Java object is read, the payload executes a visible command to prove code execution. 📦 Usa...

CVE-2025-30065-PoC

CVE-2025-30065 PoC Usage Build the image docker build -t cve-2025-30065 . Generate the malicious Parquet docker run --rm -v $pwd:/poc/out cve-2025-30065 generate "cat /etc/passwd" ./out/malicious.parquet Trigger the exploit docker run --rm -v $pwd:/poc/out cve-2025-30065 trigger...

parquet-avro-rce

This repository does not have a README...

TRAI-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation

TRAI-001 CVE-2025-30065: Apache Parquet Remote Code Execution RCE Exploit Simulator Demo Screenshot Simulator interface demonstrating the exploit chain 📌 Overview This repository contains an educational simulation of CVE-2025-30065, a critical Remote Code Execution vulnerability in Apache Parquet...

parquet-canary-exploit-rce-poc-CVE-2025-30065

Canary Exploit for Parquet CVE-2025-30065 -. '-. OO OO .-----,--/ ,. ,------. .-----. .----. .-----..------. .-----. .----. .----. ,--. .------. ' .--.\ \ //| .---' .-'/ ,-. / .. / ,-. | | .-' / -. / .. \ / .. \ / .' | | | |'-.\ \ / / | | OO'-' | . / \ '-' | | '--. OO'-' ' . / \ . / \ . / -. |...

CLEANSTART-2026-FX93262 Schema parsing in the parquet-avro module of Apache Parquet 1

Security vulnerability affects the druid-fips package. Schema parsing in the parquet-avro module of Apache Parquet 1...

CVE-2025-30065

CVE-2025-30065 Research Notes This repository is kept intentionally small and readable. It is intended for authorized security research, local validation, and defensive study of CVE-2025-30065 in Apache Parquet / Avro schema handling. The README focuses on repository hygiene, build reproducibilit...

CLEANSTART-2026-VI66132 Schema parsing in the parquet-avro module of Apache Parquet 1

Security vulnerability affects the apache-hive package. Schema parsing in the parquet-avro module of Apache Parquet 1...

CLEANSTART-2026-QF46334 Schema parsing in the parquet-avro module of Apache Parquet 1

Security vulnerability affects the apache-hive package. Schema parsing in the parquet-avro module of Apache Parquet 1...

Linux Distros Unpatched Vulnerability : CVE-2026-92287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and...

SUSE CVE-2026-92287

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

External Control of System or Configuration Setting

Overview Affected versions of this package are vulnerable to External Control of System or Configuration Setting in the GetKmsClientFromConfigOrKeyMaterial function, which falls back to the KMS URL embedded in a Parquet file's key material when KmsConnectionConfig does not specify one, and forwar...

External Control of System or Configuration Setting

Overview pyarrow is a Python API for functionality provided by the Arrow C++ libraries, along with tools for Arrow integration and interoperability with pandas, NumPy, and other software in the Python ecosystem. Affected versions of this package are vulnerable to External Control of System or...

CVE-2026-92287

A flaw was found in Apache Arrow and PyArrow. When reading encrypted Parquet files configured with a Key Management Service KMS client, unvalidated KMS server addresses embedded within the file can be passed directly to the client implementation. An attacker can supply a maliciously crafted Parqu...

AZL-110001 CVE-2026-92287 affecting package libarrow 15.0.0-10

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

AZL-109896 CVE-2026-92287 affecting package ceph 18.2.2-13

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

CVE-2026-92287

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

DEBIAN-CVE-2026-92287

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...

CVE-2026-92287

Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...