CVE-2026-49950 Details
Description
Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which triggers pickle __reduce__ gadget execution before message type validation, achieving remote code execution as the server process which commonly runs as root on GPU nodes.
A vulnerability allowing unauthenticated deserialization has been identified in Xorbits Xoscar versions through 0.11.2. This vulnerability resides in the actor-pool TCP channel, where remote attackers can send crafted data that is not properly validated. The issue arises because the deserialization process with 'cloudpickle' is applied to the message body before the type is validated, enabling the execution of arbitrary code. The exploitation occurs within the server process, which typically has root privileges on GPU nodes.
There is currently no fixed release available. Until a patch is released, it is recommended to isolate Xoscar actor-pool ports from untrusted networks, especially in distributed deployments. Keep these ports on a private segment and do not expose them beyond the cluster. Treat any host that can access an actor pool as potentially able to execute code on it.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 13, 2026CISA-ADP
Assessed Oct 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Xorbits Xoscar | >= 0.1.0, <= 0.11.2 (semver) |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 16, 2026 | CVE Modified | [email protected] |
| Oct 14, 2026 | CVE Modified | CISA-ADP |
| Oct 13, 2026 | New CVE Received | [email protected] |