Vulnerability Description
AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadcast.py that allows unauthenticated remote attackers to execute arbitrary code by sending a malicious pickle payload to a ZMQ SUB socket with no authentication, HMAC, or format validation. Attackers who can reach the writer XPUB endpoint on the cluster network or supply a forged Handle with an attacker-controlled remote_subscribe_addr can deliver a crafted pickle payload that executes arbitrary code simultaneously as the inference worker process on every remote reader worker.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amd | Aiter | <= 0.1.14 |
Related Weaknesses (CWE)
References
- https://github.com/ROCm/aiter/issues/3076ExploitIssue TrackingMitigation
- https://github.com/ROCm/aiter/pull/3170Issue TrackingPatch
- https://www.vulncheck.com/advisories/ai-tensor-engine-for-rocm-aiter-unauthenticThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-49121
- https://bugzilla.redhat.com/show_bug.cgi?id=2483882
- https://github.com/ROCm/aiter/issues/3076ExploitIssue TrackingMitigation
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49121.json
FAQ
What is CVE-2026-49121?
CVE-2026-49121 is a vulnerability with a CVSS score of 8.1 (HIGH). AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadcast.py that allows unauthenticated...
How severe is CVE-2026-49121?
CVE-2026-49121 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-49121?
Check the references section above for vendor advisories and patch information. Affected products include: Amd Aiter.