FedML vulnerabilities

A weakness was identified in FedML-AI FedML up to 0.9.6. It affects the S3Storage.read_model function in fedml/core/distributed/communication/s3/remote_storage.py of the MQTT+S3 Communication Backend component, and manipulation of the s3_key_str argument causes deserialization. Remote exploitation is possible and the project has not responded to the report.

FedML-AI FedML up to version 0.8.9 contains a deserialization vulnerability in the sendMessage function of the grpc_server.py file in the gRPC server component. Remote attackers can perform manipulation leading to deserialization, potentially enabling arbitrary code execution.

FedML-AI FedML versions up to 0.8.9 contain a path traversal vulnerability in the MQTT Message Handler component in FileUtils.java. An attacker can remotely manipulate the dataSet argument, leading to access to files outside the allowed directory.