PT-2024-33890 · Python · Pickle

Published 2024-10-09 · Updated 2026-04-08 · CVE-2024-50050

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Llama Stack versions prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 Meta Llama Framework (affected versions not specified)

Description Llama Stack, prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005, used Pickle as a serialization format for socket communication. This allowed for potential remote code execution. The communication method has been changed to use JSON instead. The issue is actively exploited and affects AI model hosting and system security. The vulnerability involves a flaw in the recv pyobj function, related to deserialization. The vulnerability allows attackers to execute arbitrary code on the server. The vulnerability is also present in other projects due to code reuse.

Recommendations Update Llama Stack to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2025-02551

CVE-2024-50050

Affected Products

Pickle

References · 55

• https://cve.org/CVERecord?id=CVE-2024-50050 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-50050 · Security Note
• https://bdu.fstec.ru/vul/2025-02551 · Security Note
• https://github.com/meta-llama/llama-stack/pull/232 · Note
• https://twitter.com/kenshii_ai/status/1989756504686113194 · Twitter Post
• https://reddit.com/r/DSTengine/comments/1sg35sf/14_aillm_vulnerability_classes_not_in_owasp_or · Reddit Post
• https://twitter.com/transilienceai/status/1887112792601219574 · Twitter Post
• https://twitter.com/catnap707/status/1883628212321919393 · Twitter Post
• https://cert.be/en/advisory/warning-vulnerability-meta-llama-stack-can-be-exploited-remote-code-execution-patch · Note
• https://twitter.com/DavidLWaterson/status/1883952146023882816 · Twitter Post
• https://twitter.com/fletch_ai/status/1884119355300126995 · Twitter Post
• https://twitter.com/AIDE_ink/status/1883503162252021824 · Twitter Post
• https://twitter.com/danielcafeluta/status/1883886296210559383 · Twitter Post
• https://twitter.com/GHak2learn27752/status/1883869010577826157 · Twitter Post
• https://twitter.com/Dinosn/status/1883428068150346234 · Twitter Post