ktransformers vulnerabilities

CVEs whose affected-version data names the ktransformers package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-26210Critical· 9.8PoC

6mo ago

KTransformers Unsafe Deserialization RCE via balance_serve

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deserializes incoming me…

▾ Abyssalkvcache-ai · ktransformersEPSS 0.70%via CVEORG