CVE-2026-49121

Name of the Vulnerable Software and Affected Versions AI Tensor Engine for ROCm (AITER) versions prior to 0.1.15

Description An unauthenticated remote code execution issue exists in the MessageQueue.recv() function within shm broadcast.py. This occurs because a ZMQ SUB socket lacks authentication, HMAC, or format validation, allowing remote attackers to execute arbitrary code by sending a malicious pickle payload. Attackers can achieve this by reaching the writer XPUB endpoint on the cluster network or by providing a forged Handle containing an attacker-controlled remote subscribe addr. This allows the delivery of a crafted pickle payload that executes code as the inference worker process across every remote reader worker.

Recommendations Update to a version later than 0.1.14.