CVE-2026-26210

CriticalCVSS 9.8/10Last modified Oct 26, 2026

Description

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deserializes incoming messages using pickle.loads() without validation. Attackers can send a crafted pickle payload to the exposed ZMQ socket to execute arbitrary code on the server with the privileges of the ktransformers process.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Vendor	Product	Versions
kvcache-ai	ktransformers	<= 0.5.3

References

https://chocapikk.com/posts/2026/ktransformers-pickle-rce/Exploit, Mitigation, Third Party Advisory
https://github.com/kvcache-ai/ktransformers/pull/1944Issue Tracking, Patch
https://www.vulncheck.com/advisories/ktransformers-unsafe-deserialization-rce-via-balance-serveThird Party Advisory

Timeline

Published: Apr 23, 2026
Last modified: Oct 26, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-262114.8Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The val CVE-2026-262127.2Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vulnerability that allows authenticated attac CVE-2026-262139.8thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi CVE-2026-262147.4Galaxy FDS Android SDK (XiaoMi/galaxy-fds-sdk-android) version 3.0.8 and prior disable TLS hostname verification when HTTPS is enabled (the CVE-2026-262159.3manga-image-translator version beta-0.3 and prior in shared API mode contains an unsafe deserialization vulnerability that can lead to unaut CVE-2026-2621610.0Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a h CVE-2026-262177.5Crawl4AI versions prior to 0.8.0 contain a local file inclusion vulnerability in the Docker API deployment. The /execute_js, /screenshot, /p CVE-2026-262189.8newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisioned with a predicta CVE-2026-262199.1newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm. The implementation does not incorporate per-user sal CVE-2026-26225.4A vulnerability was detected in Blossom up to 1.17.1. This vulnerability affects the function content of the file blossom-backend/backend/sr CVE-2026-262209.3LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution vulnerability in PD (prefill-decode) disaggregation mode. CVE-2026-262219.8Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe).