Unauthenticated Remote Code Execution in Xorbits Xoscar

Xorbits Xoscar versions up to and including 0.11.2 are susceptible to a critical unauthenticated deserialization vulnerability, tracked as CVE-2026-49950. The vulnerability exists within the application's actor-pool TCP communication channel. Remote, unauthenticated attackers can supply crafted malicious payloads that are processed by the SocketChannel.recv() function. This input is passed directly to the cloudpickle.loads() method without prior validation of the message type. Because this processing occurs before the application verifies the data structure, attackers can trigger the execution of arbitrary code via pickle reduce gadgets. This attack results in remote code execution (RCE) with the privileges of the server process, which frequently runs as the root user on GPU-enabled nodes, potentially leading to full cluster compromise.

Impact

Successful exploitation allows remote attackers to execute arbitrary code with root-level privileges on GPU nodes running Xoscar. This exposes the entire infrastructure to unauthorized access, data exfiltration, and potential persistence mechanisms within the targeted environment.

Recommendation

• Upgrade Xorbits Xoscar to a patched version beyond 0.11.2 immediately to remediate CVE-2026-49950.
• Implement network segmentation to restrict access to the actor-pool TCP ports to only authorized compute nodes.
• Monitor network traffic for anomalous data structures or serialized Python objects being sent to the TCP channels used by the Xoscar actor-pool.