CVE-2026-31234Critical· 9.8▾ MidnightHorovod contains an insecure deserialization vulnerability in its KVStore HTTP server component
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.7%
Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component. The KVStore server, used for distributed task coordination, lacks authentication and authorization controls, allowing any remote attacker to write arbitrary data via HTTP PUT requests. When a Horovod worker reads data from the KVStore (via HTTP GET), it deserializes the data using cloudpickle.loads() without verifying its source or integrity. An attacker can exploit this by sending a malicious pickle payload to the server before the legitimate data is written, causing the victim worker to deserialize and execute arbitrary code, leading to remote code execution.
horovod <= 0.28.1Refer to the advisory for the patched release.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-10190Critical· 9.8Horovod Vulnerable to Command Injection
CVE-2024-10553Critical· 9.8H2O Deserialization of Untrusted Data Vulnerability
CVE-2025-49655Critical· 9.8Keras framework vulnerable to deserialization of untrusted data
CVE-2024-23730Critical· 9.8Unsafe yaml deserialization in llama-hub
CVE-2024-8502Critical· 9.8AgentScope Deserialization Vulnerability
CVE-2024-9070Critical· 9.8BentoML deserialization vulnerability