high
advisory
Remote Code Execution and DoS in Angel via Kryo Deserialization
Angel versions 3.3.0 and earlier are vulnerable to a deserialization flaw allowing unauthenticated remote attackers to trigger arbitrary code execution or denial-of-service via the master RPC endpoint.
CVE search metadata
CVE search record: CVE-2026-92785. Severity: high. CVSS: 8.1. KEV: no. Brief: Remote Code Execution and DoS in Angel via Kryo Deserialization. Brief link: https://feed.craftedsignal.io/briefs/2026-09-angel-deserialization/
Triage facts
- Severity
- High
- Freshness
- PublishedSep 16, 21:56 UTC
- Vulnerabilities
- 1 CVE
Angel versions 3.3.0 and earlier contain a critical deserialization vulnerability (CVE-2026-92785) stemming from the improper