Live › vulnerability › CVE-2024-10190
Go to dashboardHorovod up to and including 0.28.1 lets anyone send a PUT request to the elastic rendezvous handler carrying a malicious base64 pickle object. The server deserializes it with cloudpickle, so the attacker runs arbitrary code on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:27 UTC, 0h before NVD. All times on this page are UTC.
Teams running Horovod elastic training with the rendezvous KV store exposed on a reachable network are affected, since the PUT path needs no login. Systems that only use Horovod on a closed machine or network without the elastic rendezvous server are less exposed; the sources do not say whether that server runs by default.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| horovod | pypi | <= 0.28.1 | – |
| horovod | vendor | <= 0.28.1 | – |
pip show horovod and compare the version against 0.28.1.0.28.1; the sources do not name the fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability is due to improper handling of base64-encoded data in the ElasticRendezvousHandler, a subclass of KVStoreHandler. Specifically, the _put_value method in ElasticRendezvousHandler calls codec.loads_base64(value), which eventually invokes cloudpickle.loads(decoded). This allows an attacker to send a malicious pickle object via a PUT request, leading to arbitrary code execution on the server.
This page as .md · .json · in your agent: get_signal("CVE-2024-10190")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.