Vulnerability details

CVE-2026-49121

ROCm aiterRed Hat AI Inference ServerRed Hat Enterprise Linux AI 3Red Hat OpenShift AI

AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization

CVSS 4.0

9.2Critical

Official description

AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadcast.py that allows unauthenticated remote attackers to execute arbitrary code by sending a malicious pickle payload to a ZMQ SUB socket with no authentication, HMAC, or format validation. Attackers who can reach the writer XPUB endpoint on the cluster network or supply a forged Handle with an attacker-controlled remote_subscribe_addr can deliver a crafted pickle payload that executes arbitrary code simultaneously as the inference worker process on every remote reader worker.

CVSS scores

Score	Version	Source	Vector
9.2Critical	4.0	CVEProject cvelistV5 (CNA) (VulnCheck)	`CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`
8.1High	3.1	CVEProject cvelistV5 (CNA) (VulnCheck)	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`
8.1High	3.1	CVEProject cvelistV5 (CNA) (redhat-SADP)	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
ROCm	aiter	v ≤ 0.1.14	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat AI Inference Server	All	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat AI Inference Server	All	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	All	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat Enterprise Linux AI (RHEL AI) 3	All	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat OpenShift AI (RHOAI)	All	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/ROCm/aiter/pull/3170 issue-trackingpatch
https://www.vulncheck.com/advisories/ai-tensor-engine-for-rocm-aiter-unauthenticated-rce-via-messagequeue-recv-pickle-deserialization third-party-advisory
https://github.com/ROCm/aiter/issues/3076 issue-tracking
https://access.redhat.com/security/cve/CVE-2026-49121 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2483882 issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-49121.json x_sadp-csaf-vex

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-06-01
Last updated: 2026-11-08
State: Published
Assigner (CNA): VulnCheck

Exploit prediction (EPSS)

1.1%

Probability of exploitation in 30 days

65.9%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-502
Deserialization of Untrusted Data