EXPLOIT-CVE-2026-56121

CVE-2026-56121 — Ejecución remota de código no autenticada en Feast deserialización gRPC de ApplyFeatureView Ejecución remota de código no autenticada en Feast 0.63.0 mediante deserialización insegura con dill.loads en el servidor gRPC del registro. Este repositorio contiene un exploit de prueba ...

CVE-2026-56121: Deserialization of Untrusted Data

Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the registry server. The userdefinedfunction.body field of an OnDemandFeatureView spec is decoded from...

CVE-2026-7304: Deserialization of Untrusted Data

SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads will be deserialized without validation...