Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
CVE-2026-49950: Xoscar 0.11.2 enables remote code execution via TCP
CVE-2026-49950 · published today
Summary
The Xoscar component version 0.11.2 can run any code an attacker sends over its internal TCP channel. Because the software processes the incoming data without checking it first, a malicious user could take control of the server, which often runs with high privileges. Update to a newer version or apply the vendor's patch to stop this behavior.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| xorbitsai | xoscar | <= 0.11.2 |
Original advisory text
Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool
Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which triggers pickle __reduce__ gadget execution before message type validation, achieving remote code execution as the server process which commonly runs as root on GPU nodes.
References
- https://github.com/xorbitsai/xoscar/blob/v0.11.2/python/xoscar/backends/communic... URL
- https://github.com/xorbitsai/xoscar/blob/v0.11.2/python/xoscar/serialization/cor... URL
- https://www.vulncheck.com/advisories/xorbits-xoscar-unauthenticated-deserializat... Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/49xxx/CVE-2026-49950... Vendor Advisory
- https://github.com/xorbitsai/xoscar Product
- https://nvd.nist.gov/vuln/detail/CVE-2026-49950 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Severity
9.9
Critical
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published13 Oct 2026
Updated14 Oct 2026
First seen13 Oct 2026
Track software like this
Free during beta