Vulnerability Description
ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket bound to all interfaces. Attackers can exploit malicious __reduce__ methods embedded in crafted pickle payloads to execute arbitrary shell commands as the server process.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/kvcache-ai/ktransformers/commit/def0f9313d6e063b5c5ccdfa1f670
- https://github.com/kvcache-ai/ktransformers/issues/2087
- https://github.com/kvcache-ai/ktransformers/pull/2091
- https://www.vulncheck.com/advisories/ktransformers-unauthenticated-pickle-deseri
FAQ
What is CVE-2026-63767?
CVE-2026-63767 is a vulnerability with a CVSS score of 9.8 (CRITICAL). ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pic...
How severe is CVE-2026-63767?
CVE-2026-63767 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-63767?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.