CVE-2026-26210: KTransformers Unsafe Deserialization RCE via balance_serve
KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanceserve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deserializes incoming messages using pickle.loads() without validation. Attackers can send a crafted pickle payload to the exposed ZMQ socket to execute arbitrary code on the server with the privileges of the ktransformers process.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-26210?
CVE-2026-26210 is classified as a critical remote code execution vulnerability due to unsafe deserialization.
How do I fix CVE-2026-26210?
To fix CVE-2026-26210, upgrade KTransformers to version 0.5.4 or later where the vulnerability has been addressed.
What causes CVE-2026-26210?
CVE-2026-26210 is caused by the balance_serve backend mode accepting unauthenticated connections and deserializing incoming messages.
Who is affected by CVE-2026-26210?
CVE-2026-26210 affects all versions of KTransformers up to and including 0.5.3.
What are the implications of exploiting CVE-2026-26210?
Exploiting CVE-2026-26210 allows an attacker to execute arbitrary code on the server, potentially leading to full system compromise.