CVE-2026-49121 Details

A remote code execution vulnerability has been identified in AI Tensor Engine for ROCm (AITER) versions through 0.1.14. The issue arises in the MessageQueue.recv() function within shm_broadcast.py, where the application deserializes untrusted data from a ZMQ SUB socket without authentication or validation. This vulnerability allows remote attackers to execute arbitrary code by sending a malicious pickle payload. Exploitation requires access to the writer's XPUB endpoint on the cluster network or the ability to supply a forged Handle with an attacker-controlled remote_subscribe_addr, targeting all remote reader workers simultaneously.

Users are advised to update to a version of AITER that addresses this vulnerability. If updating is not possible, consider implementing a workaround by modifying the broadcast mechanism to use a safer serialization format, such as msgpack or a custom solution that validates data before deserialization.