CVE-2026-56121_exploit

CVE-2026-56121 — Feast 레지스트리 인증 없는 RCE dill.loads Feast 피처 스토어의 레지스트리 gRPC 서버 에서 인증 없는 원격 코드 실행 취약점입니다. ApplyFeatureView RPC는 요청 프로토proto에서 OnDemandFeatureView를 재구성합니다. 이 과정에서 spec.userdefinedfunction.body를 base64 디코딩하여 인증 검사 전에 dill.loads로 전달합니다. dill은 pickle의 상위 집합이므로 reduce가 os.system, cmd,을...

CVE-2026-56121-Feast-Unauth-RCE

CVE-2026-56121 — Feast gRPC 레지스트리 역직렬화를 통한 인증되지 않은 RCE Feast 0.63.0 레지스트리 gRPC 서버는 사양이 도착하는 즉시 OnDemandFeatureView의 사용자 정의 함수를 dill.loads합니다. — 인가 확인 전에. 배송된 구성은 auth: noauth이므로 레지스트리 포트기본값 6570에 도달할 수 있는 모든 클라이언트는 악성 피클이 포함된 ApplyFeatureView 요청 하나를 보내 인증되지 않은 원격 코드 실행 을 얻습니다. | ---|--- CVE|...

Exploit for CVE-2026-56121

CVE-2026-56121 — Feast Unauthenticated RCE ApplyFeatureView g...

CVE-2026-18948

A flaw was found in Feast. The system improperly deserializes user-defined functions UDFs stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary code execution on the feature server in...

CVE-2026-18948 Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server

A flaw was found in Feast. The system improperly deserializes user-defined functions UDFs stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary code execution on the feature server in...

EUVD-2026-55818

A flaw was found in Feast. The system improperly deserializes user-defined functions UDFs stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary code execution on the feature server in...

CVE-2026-18948

Feast: A flaw in serializing UDFs with dill enabling unsafe deserialization leads to unauthenticated RCE on the feature server and, via deserialization bypass, on the registry server. A remote attacker can store a malicious UDF, with the risk of cross-tenant data access and lateral movement in de...

CVE-2026-18948 Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server

A flaw was found in Feast. The system improperly deserializes user-defined functions UDFs stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary code execution on the feature server in...

PT-2026-53350

A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution RCE via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.create agent method, where serialized input is deserialized using...

CVE-2026-7304

SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads will be deserialized without validation...

GHSA-36M8-W8QF-G76P SGLang: Unauthenticated RCE via --enable-custom-logit-processor

SGLang's multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads will be deserialized without validation...

SGLang: Unauthenticated RCE via --enable-custom-logit-processor

SGLang's multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads will be deserialized without validation...

CVE-2026-7304

The SGLang multimodal generation runtime is vulnerable to unauthenticated remote code execution (RCE) when the --enable-custom-logit-processor option is active. The root cause is the deserialization of Python objects via dill.loads() without proper validation. This vulnerability has been demonstr...

CVE-2026-7304 CVE-2026-7304

SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads will be deserialized without validation...

CVE-2026-7304 CVE-2026-7304

SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads will be deserialized without validation...

AgentScope 代码问题漏洞

AgentScope is a ModelScope open source application. Build LLM-based multi-intelligence applications more simply. A code issue vulnerability exists in AgentScope version v0.0.6a3, which stems from the RpcAgentServerLauncher class deserializing untrustworthy data via the dill library leading to...