---
id: CVE-2026-25873
title: OmniGen2-RL Reward Server Unsafe Deserialization RCE
summary: >-
  OmniGen2-RL contains an unauthenticated remote code execution vulnerability in
  the reward server component that allows remote attackers to execute arbitrary
  commands by sending malicious HTTP POST requests. Attackers can exploit
  insecure…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-502
vendor: Beijing Academy of Artificial Intelligence (BAAI)
product: OmniGen2-RL
affected:
  - OmniGen2-RL all versions
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-03-19T15:43:03.111886Z'
exploitAvailable: true
published: '2026-03-18'
updated: '2026-11-08'
sourceUpdated: '2026-11-08T14:01:28.713Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-25873'
references:
  - url: 'https://github.com/VectorSpaceLab/OmniGen2/pull/139'
  - url: 'https://chocapikk.com/posts/2026/omnigen2-pickle-rce/'
  - url: 'https://arxiv.org/abs/2506.18871'
  - url: >-
      https://github.com/VectorSpaceLab/OmniGen2/blob/3a13017e532f9f309a38bca571fd62200a6415c5/OmniGen2-RL/reward_server/reward_server.py#L118
  - url: >-
      https://github.com/VectorSpaceLab/OmniGen2/blob/3a13017e532f9f309a38bca571fd62200a6415c5/OmniGen2-RL/reward_server/reward_proxy.py#L208
  - url: >-
      https://github.com/VectorSpaceLab/OmniGen2/blob/3a13017e532f9f309a38bca571fd62200a6415c5/OmniGen2-RL/reward_server/reward_proxy.py#L224
  - url: >-
      https://www.vulncheck.com/advisories/omnigen2-rl-reward-server-unsafe-deserialization-rce
tags:
  - cve.org
  - exploit-available
epss: 0.01142
epssPercentile: 0.66895
ingestedAt: '2026-11-08T14:51:22.470Z'
---

## Overview

OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands by sending malicious HTTP POST requests. Attackers can exploit insecure pickle deserialization of request bodies to achieve code execution on the host system running the exposed service.

## Affected

- `OmniGen2-RL all versions`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.