CVE-2025-30065: Apache Parquet RCE via Schema Parsing
Can Apache Parquet files contain malware?
A critical deserialization vulnerability in Apache Parquet's Java library. Maliciously crafted Parquet files trigger arbitrary code execution when their schemas are parsed, affecting any data pipeline or analytics platform processing Parquet data.
Impact & Exploitation
CVSS 10.0. Affects virtually every big data platform (Spark, Hadoop, Flink, Hive). A single malicious Parquet file can compromise an entire data lake or analytics cluster.
Precogs Research
This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.