CVE-2026-49950

Summary

Xorbits Xoscar contains a critical deserialization vulnerability that allows remote attackers to execute arbitrary code on GPU nodes running as root, due to unvalidated data being passed to cloudpickle.loads() during TCP communication.

Exploitability

Exploitation is straightforward with no authentication required, leveraging the actor-pool TCP channel to send crafted data that triggers pickle gadget execution before message validation.

Blast radius

The vulnerability could lead to full system compromise on GPU nodes where the server process commonly runs as root, potentially affecting multiple users or workloads sharing those resources.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Xorbits Xoscar version 0.11.3 or later to address this deserialization vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.