CVE-2026-5536
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
FedML-AI FedML up to version 0.8.9 contains a deserialization vulnerability in the sendMessage function of the grpc_server.py file in the gRPC server component. Remote attackers can perform manipulation leading to deserialization, potentially enabling arbitrary code execution.
Risk Assessment
The risk involves remote code execution via deserialization, potentially leading to full compromise of the FedML server.
Recommendation
Update FedML to a version newer than 0.8.9 or apply temporary mitigations such as restricting access to the gRPC server.
Other vulnerabilities in FedML
See all- CVE-2026-90614Medium
A weakness was identified in FedML-AI FedML up to 0.9.6. It affects the S3Storage.read_model function in fedml/core/distributed/communication/s3/remote_storage.py of the MQTT+S3 Communication Backend component, and manipulation of the s3_key_str argument causes deserialization. Remote exploitation is possible and the project has not responded to the report.
- CVE-2026-5535Medium
FedML-AI FedML versions up to 0.8.9 contain a path traversal vulnerability in the MQTT Message Handler component in FileUtils.java. An attacker can remotely manipulate the dataSet argument, leading to access to files outside the allowed directory.
Original NVD description (English source)
A weakness has been identified in FedML-AI FedML up to 0.8.9. Affected is the function sendMessage of the file grpc_server.py of the component gRPC server. Executing a manipulation can lead to deserialization. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS