CVE-2026-49950

9.8Critical

Published 13 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

9.8Critical

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-502

Impact

Unauthenticated attackers can execute arbitrary code with the privileges of the server process (often root on GPU nodes) over the network. They only need network reachability to the exposed actor-pool TCP port.

Root cause

SocketChannel.recv() deserializes untrusted network data with cloudpickle.loads() before validating message types, triggering pickle gadget execution.

Affected systems

Xorbits Xoscar through 0.11.2

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

No fixed version is specified in the advisory; block or restrict access to actor-pool TCP ports at the firewall level immediately.

shell

$ pip show xoscar

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which triggers pickle __reduce__ gadget execution before message type validation, achieving remote code execution as the server process which commonly runs as root on GPU nodes.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-49950