{"id":"CVE-2026-49950","published":"2026-10-13T21:17:39.007","lastModified":"2026-10-16T18:25:45.343","description":"Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which triggers pickle __reduce__ gadget execution before message type validation, achieving remote code execution as the server process which commonly runs as root on GPU nodes.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://github.com/xorbitsai/xoscar/blob/v0.11.2/python/xoscar/backends/communication/socket.py#L99-L104","tags":[]},{"url":"https://github.com/xorbitsai/xoscar/blob/v0.11.2/python/xoscar/serialization/core.pyx#L260","tags":[]},{"url":"https://www.vulncheck.com/advisories/xorbits-xoscar-unauthenticated-deserialization-rce-via-actor-pool","tags":[]},{"url":"https://www.vulncheck.com/blog/xorbits-xoscar-unauth-cloudpickle-rce","tags":[]}],"exploitRefs":[{"url":"https://github.com/xorbitsai/xoscar/blob/v0.11.2/python/xoscar/backends/communication/socket.py#L99-L104","tags":[]},{"url":"https://github.com/xorbitsai/xoscar/blob/v0.11.2/python/xoscar/serialization/core.pyx#L260","tags":[]}],"hasPoc":true,"ai":{"summary":"Xorbits Xoscar contains a critical deserialization vulnerability that allows remote attackers to execute arbitrary code on GPU nodes running as root, due to unvalidated data being passed to cloudpickle.loads() during TCP communication.","exploitability":"Exploitation is straightforward with no authentication required, leveraging the actor-pool TCP channel to send crafted data that triggers pickle gadget execution before message validation.","blast_radius":"The vulnerability could lead to full system compromise on GPU nodes where the server process commonly runs as root, potentially affecting multiple users or workloads sharing those resources.","remediation":"Upgrade to Xorbits Xoscar version 0.11.3 or later to address this deserialization vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","deserialization","gpu","remote"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:52:47.608Z"}}