by Kastro
Paper/Archive/CVE-2026-63767

CVE-2026-63767

kvcache-ai ktransformers — ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 66.1.661 × 2013.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket bound to all interfaces. Attackers can exploit malicious __reduce__ methods embedded in crafted pickle payloads to execute arbitrary shell commands as the server process.

Affected

ProductAffectedFixed inSource
ktransformers≤ 0.6.3def0f9313d6e063b5c5ccdfa1f6707f7a40dfdcaCNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

exploitgithub.com/kvcache-ai/ktransformers/issues/2087patchgithub.com/kvcache-ai/ktransformers/pull/2091patchgithub.com/kvcache-ai/ktransformers/commit/def0f9313d6e063b5c5ccdfa1f6707f7a40dfdcawriteupvulncheck.com/advisories/ktransformers-unauthenticated-pickle-deserialization-rce-via-zmq