CVE-2026-63767 Details
Description
ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket bound to all interfaces. Attackers can exploit malicious __reduce__ methods embedded in crafted pickle payloads to execute arbitrary shell commands as the server process.
A remote code execution vulnerability has been identified in ktransformers versions through 0.6.3. This issue arises from an unauthenticated pickle deserialization flaw that allows remote attackers to execute arbitrary commands. The vulnerability is present in the SchedulerServer's ZMQ ROUTER socket, which is bound to all interfaces. Attackers can exploit this by sending crafted pickle payloads that include malicious __reduce__ methods, executing commands as the server process.
Users are advised to update to ktransformers version 0.6.4 or later, and to bind the SchedulerServer ZMQ socket to loopback (127.0.0.1) instead of all interfaces. Additionally, it is recommended to avoid deserializing untrusted data with pickle, and to use a safer data format for inter-process communication, such as JSON or Protocol Buffers.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 20, 2026CISA-ADP
Assessed Jul 21, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/kvcache-ai/ktransformers/commit/def0f9313d6e063b5c5ccdfa1f6707f7a40dfdca | [email protected] | Source CodeVendor |
| https://github.com/kvcache-ai/ktransformers/issues/2087 | [email protected] | ExploitIssue TrackingRemedyTechnical DescriptionVendor |
| https://github.com/kvcache-ai/ktransformers/pull/2091 | [email protected] | Issue TrackingVendor |
| https://www.vulncheck.com/advisories/ktransformers-unauthenticated-pickle-deserialization-rce-via-zmq | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| kvcache-ai ktransformers | <= 0.6.3 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 21, 2026 | CVE Modified | CISA-ADP |
| Jul 20, 2026 | New CVE Received | [email protected] |