Ktransformers <= 0.6.3 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ktransformers--0.6.3/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 20 Jul 2026 20:19:18 +0000Critical Unauthenticated RCE in ktransformers (CVE-2026-63767)https://feed.craftedsignal.io/briefs/2026-07-ktransformers-rce/Mon, 20 Jul 2026 20:19:18 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-07-ktransformers-rce/A critical unauthenticated pickle deserialization vulnerability (CVE-2026-63767) in ktransformers versions up to 0.6.3 allows remote attackers to execute arbitrary commands by sending specially crafted pickle payloads containing malicious `__reduce__` methods to the SchedulerServer ZMQ ROUTER socket, leading to complete server compromise.A critical remote code execution (RCE) vulnerability, CVE-2026-63767, has been discovered in ktransformers versions through 0.6.3. This vulnerability stems from an unauthenticated pickle deserialization flaw that affects the SchedulerServer ZMQ ROUTER socket when it is bound to all interfaces. Remote attackers can exploit this by crafting and transmitting malicious pickle payloads directly to the exposed ZMQ socket. The payloads leverage Python's __reduce__ methods to embed and execute arbitrary shell commands on the system hosting ktransformers. This allows attackers to gain full control over the affected server, potentially leading to data exfiltration, system integrity loss, or further network lateral movement. The vulnerability was fixed in commit def0f93 and has a CVSS v3.1 base score of 9.8 (Critical).

Attack Chain

  1. An attacker identifies an internet-exposed ktransformers SchedulerServer ZMQ ROUTER socket on a vulnerable server running ktransformers version 0.6.3 or earlier.
  2. The attacker crafts a Python pickle payload specifically designed to contain malicious __reduce__ methods.
  3. The malicious __reduce__ methods are configured to invoke arbitrary system commands, such as spawning a shell or downloading additional malware.
  4. The crafted pickle payload is transmitted unauthenticated over the network to the vulnerable ZMQ ROUTER socket.
  5. The ktransformers application receives the untrusted pickle payload and initiates the deserialization process.
  6. During deserialization, the Python pickle module processes the malicious __reduce__ method, triggering the execution of the embedded arbitrary commands.
  7. The arbitrary shell commands are executed on the underlying system with the privileges of the ktransformers server process, achieving remote code execution and initial system compromise.

Impact

Successful exploitation of CVE-2026-63767 results in unauthenticated remote code execution on the server running ktransformers. This critical impact means attackers can fully compromise the affected system, leading to arbitrary data modification or deletion, sensitive data exfiltration, and the ability to establish persistence or pivot to other systems within the network. Depending on the server's role and data stored, this could lead to significant operational disruption, reputational damage, and regulatory penalties. The high CVSS score of 9.8 reflects the severity of this vulnerability.

Recommendation

  • Immediately apply the patch associated with commit def0f93 or upgrade ktransformers to a version past 0.6.3, as referenced in the NVD.
  • Deploy the provided Sigma rules for Windows and Linux to your SIEM to detect suspicious process creation activities originating from python.exe or other ktransformers related processes.
  • Review network firewall rules to restrict direct external access to ZMQ ROUTER sockets, allowing connections only from trusted internal sources if possible.
  • Monitor process creation logs (e.g., Sysmon on Windows, Auditd/Procfs on Linux) for unusual child processes spawned by Python interpreters or the ktransformers application.
]]>criticaladvisorydeserializationremote-code-executionpythonzmqvulnerability