high
advisory
Remote Code Execution and DoS in Angel via Kryo Deserialization
Angel versions 3.3.0 and earlier are vulnerable to a deserialization flaw allowing unauthenticated remote attackers to trigger arbitrary code execution or denial-of-service via the master RPC endpoint.
CVE search metadata
CVE search record: CVE-2026-92785. Severity: high. CVSS: 8.1. KEV: no. Brief: Remote Code Execution and DoS in Angel via Kryo Deserialization. Brief link: https://feed.craftedsignal.io/briefs/2026-09-angel-deserialization/
Angel versions 3.3.0 and earlier contain a critical deserialization vulnerability (CVE-2026-92785) stemming from the improper