PT-2026-61706 · Unknown · Transformers

George Chen · CVE-2026-63767 · Published 2026-07-20 · Updated 2026-07-20

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ktransformers versions prior to 0.6.3 commit def0f93

Description An unauthenticated pickle deserialization issue exists where remote attackers can execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket bound to all interfaces. This is achieved by exploiting malicious reduce methods embedded in the payloads, allowing shell commands to be executed with the privileges of the server process. Pickle deserialization is the process of converting a byte stream back into a Python object, which can be dangerous if the data source is untrusted.

Recommendations Update ktransformers to the version containing commit def0f93.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-63767

Affected Products

Transformers

References · 6

• 🔥 https://github.com/kvcache-ai/ktransformers/issues/2087 · Exploit
• https://github.com/kvcache-ai/ktransformers/commit/def0f9313d6e063b5c5ccdfa1f6707f7a40dfdca · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-63767 · Security Note
• https://github.com/kvcache-ai/ktransformers/pull/2091 · Note
• https://twitter.com/OrizonCyber/status/2079348142537843042 · Twitter Post
• https://vulncheck.com/advisories/ktransformers-unauthenticated-pickle-deserialization-rce-via-zmq · Note