Live › vulnerability › CVE-2026-31234
Go to dashboardHorovod's KVStore HTTP server accepts unauthenticated PUT requests, and workers later deserialize stored values with cloudpickle.loads(). An attacker can write a malicious pickle payload that runs arbitrary code on a worker.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:30 UTC, 0h before NVD. All times on this page are UTC.
Teams running distributed Horovod training jobs at version 0.28.1 or older are exposed when the KVStore server is reachable by an attacker. The sources do not name a patched version. Deployments where the KVStore port is confined to an isolated network segment or a trusted cluster network carry much less risk.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| horovod | pypi | <= 0.28.1 | – |
pip show horovod and confirm whether the installed version is 0.28.1 or olderUnknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component. The KVStore server, used for distributed task coordination, lacks authentication and authorization controls, allowing any remote attacker to write arbitrary data via HTTP PUT requests. When a Horovod worker reads data from the KVStore (via HTTP GET), it deserializes the data using cloudpickle.loads() without verifying its source or integrity. An attacker can exploit this by sending a malicious pickle payload to the server before the legitimate data is written, causing the victim worker to deserialize and execute arbitrary code, leading to remote code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-31234")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.