Vulnerability in xorbitsai xoscar

[ Why it matters ]Priority signals

• Critical severity: CVSS 9.8

[ Description ]Official description

Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv() passing unvalidated data to cloudpickle.loads(), which triggers pickle __reduce__ gadget execution before message type validation, achieving remote code execution as the server process which commonly runs as root on GPU nodes.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• github.com/xorbitsai/xoscar/blob/v0.11.2/python/xoscar/backends/communication/socket.py
• github.com/xorbitsai/xoscar/blob/v0.11.2/python/xoscar/serialization/core.pyx
• www.vulncheck.com/advisories/xorbits-xoscar-unauthenticated-deserialization-rce-via-act…
• www.vulncheck.com/blog/xorbits-xoscar-unauth-cloudpickle-rce