CVE-2026-53805: NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API
NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-model endpoints deserialize raw HTTP request bodies using Python's pickle.loads() without authentication or input validation. Attackers can supply a crafted payload containing a reduce gadget to the inference API port to achieve remote code execution as the inference process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Stop deserializing raw HTTP request bodies with pickle.loads; do not accept Python pickle payloads from untrusted sources and replace unsafe unpickling with a safe serialization/deserialization approach or only deserialize trusted, authenticated input.
GEN3C inference API (/request-inference, /seed-model) use_pickle_deserialization = false - Configuration
Require authentication and authorization for the /request-inference and /seed-model endpoints to prevent unauthenticated access.
GEN3C inference API (/request-inference, /seed-model) authentication_required = true - Configuration
Validate and sanitize request bodies before any deserialization; explicitly reject or block serialized Python pickle payloads and other unsafe input formats from untrusted clients.
GEN3C inference API (/request-inference, /seed-model) input_validation = enabled - Compensating control
Restrict network access to the inference API port using firewall rules, ACLs, WAF, or network segmentation so only trusted IPs or management networks can reach the endpoints.
- Operational
If the inference API was exposed, investigate for signs of compromise (containment, forensic analysis), and remediate any confirmed compromise (restore services from known-good backups, rebuild affected hosts).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53805?
CVE-2026-53805 has a critical severity score of 9.8.
What is CVE-2026-53805?
CVE-2026-53805 is a remote code execution vulnerability in NVIDIA SIL GEN3C's inference API due to unauthenticated deserialization of HTTP request bodies.
How do I fix CVE-2026-53805?
To fix CVE-2026-53805, ensure proper authentication and input validation for the /request-inference and /seed-model endpoints.
What can attackers do with CVE-2026-53805?
Attackers can exploit CVE-2026-53805 to execute arbitrary code on the server by sending crafted requests to the affected endpoints.
Is CVE-2026-53805 exploitable remotely?
Yes, CVE-2026-53805 is an unauthenticated remote code execution vulnerability, making it exploitable from any remote location.