EUVD-2026-81048
GHSA-49pw-fq48-934x
Severity by source
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable and unauthenticated (AV:N/PR:N/UI:N), but AC:H because reliable code execution depends on classpath gadgets; full C/I/A impact retained given arbitrary-class instantiation plus coordinator DoS.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthenticated network attackers can instantiate arbitrary classes or exhaust coordinator memory by sending crafted serialized objects to the master RPC endpoint.
AnalysisAI
Unauthenticated Kryo deserialization in the Angel-ML Angel distributed machine-learning coordinator (all versions through 3.3.0) lets any remote attacker who can reach the master RPC endpoint submit crafted setAlgoMetrics payloads that instantiate arbitrary classes or exhaust coordinator memory, producing denial of service and - when exploitable gadget classes are present on the coordinator classpath - remote code execution. No authentication or user interaction is required, but exploitation depends on network reachability to the master RPC service and, for the RCE outcome specifically, on the composition of the target's classpath; the memory-exhaustion outcome carries no such precondition and is reliably achievable. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires network reachability to the Angel master RPC endpoint, which must be exposed to the attacker; no authentication or user interaction is needed (PR:N/UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely high-severity issue but with meaningful exploitation friction that the raw 9.2 score obscures. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch identified at time of analysis: the references consist of the upstream source file, the project repository, and GitHub issue 1355, none of which provides a tagged fixed release, so the primary durable fix is a code change in KryoUtils - construct the Kryo instance with setRegistrationRequired(true) plus an explicit registration/allowlist of only the classes the setAlgoMetrics message legitimately requires (do not rely on java's jdk.serialFilter, which does not govern Kryo), then rebuild the coordinator. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all deployments of Angel-ML Angel coordinator versions through 3.3.0 and immediately restrict network access to the master RPC endpoint using firewall rules or network segmentation to allow only trusted management hosts; enable detailed logging and monitoring for abnormal memory consumption or unexpected setAlgoMetrics calls. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Oracle Java SE 7 Update 6 and earlier contains multiple sandbox bypass vulnerabilities via the ClassFinder and forName m
Remote code execution in IBM Sterling B2B Integrator, Sterling Integrator, and Tivoli Common Reporting allows unauthenti
Java Runtime Environment sandbox bypass via incorrect image channel verification in 2D component allows remote unauthent
Oracle Java SE JDK/JRE 7 and 6 Update 27 and earlier allows remote code execution with complete system compromise throug
JBoss Seam 2 in Red Hat JBoss EAP 4.3.0 fails to sanitize JBoss Expression Language inputs, allowing remote attackers to
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 up
Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Up
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allow
Remote unauthenticated attackers can execute arbitrary code on Adobe ColdFusion servers through Java deserialization fla
The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during
Same weakness CWE-502 – Deserialization of Untrusted Data
View allSame technique Deserialization
View allShare
External POC / Exploit Code
Leaving vuln.today