CVE-2026-63767 | ktransformers through 0.6.3, fixed in commit def0f93, contai… | CVSS 9.8 CRITICAL

Description

ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket bound to all interfaces. Attackers can exploit malicious __reduce__ methods embedded in crafted pickle payloads to execute arbitrary shell commands as the server process.

Metadata

CVE ID: CVE-2026-63767
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-07-18 12:34 UTC
Published: 2026-07-20 19:13 UTC
Last updated: 2026-07-20 19:13 UTC
Primary CWE: CWE-502
Deserialization of Untrusted Data
Vendor / Product: kvcache-ai / ktransformers
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products (1)

Vendor	Product	Platform	Versions
kvcache-ai	ktransformers	—	0 ≤ 0.6.3, def0f9313d6e063b5c5ccdfa1f6707f7a40dfdca

Weakness (CWE)

CWE	Source	Description
CWE-502	cna	Deserialization of Untrusted Data

CVSS scores (2)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References (4)

Researcher Disclosure https://github.com/kvcache-ai/ktransformers/issues/2087
Pull Request https://github.com/kvcache-ai/ktransformers/pull/2091
Patch Commit https://github.com/kvcache-ai/ktransformers/commit/def0f9313d6e063b5c5ccdfa1f6707f7a40dfdca
https://www.vulncheck.com/advisories/ktransformers-unauthenticated-pickle-deserialization-rce-via-zmq