CVE-2026-5535
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
FedML-AI FedML versions up to 0.8.9 contain a path traversal vulnerability in the MQTT Message Handler component in FileUtils.java. An attacker can remotely manipulate the dataSet argument, leading to access to files outside the allowed directory.
Risk Assessment
An attacker can remotely read or write files outside the allowed directory, potentially leading to data leakage or further privilege escalation.
Recommendation
Upgrade FedML to a version newer than 0.8.9 if available, or apply temporary mitigations such as path validation.
Other vulnerabilities in FedML
See all- CVE-2026-90614Medium
A weakness was identified in FedML-AI FedML up to 0.9.6. It affects the S3Storage.read_model function in fedml/core/distributed/communication/s3/remote_storage.py of the MQTT+S3 Communication Backend component, and manipulation of the s3_key_str argument causes deserialization. Remote exploitation is possible and the project has not responded to the report.
- CVE-2026-5536High
FedML-AI FedML up to version 0.8.9 contains a deserialization vulnerability in the sendMessage function of the grpc_server.py file in the gRPC server component. Remote attackers can perform manipulation leading to deserialization, potentially enabling arbitrary code execution.
Original NVD description (English source)
A security flaw has been discovered in FedML-AI FedML up to 0.8.9. This impacts an unknown function of the file FileUtils.java of the component MQTT Message Handler. Performing a manipulation of the argument dataSet results in path traversal. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS