GitHub Advisoryadvisory · PyPI

GHSA-3x5x-fw77-g54c dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()

HIGH Published 2025-03-05 Modified 2025-03-05 Official page ↗
Ecosystem
PyPI
Packages
dgl
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Weaknesses
CWE-502
Reviewed
2025-03-05

Affected packages

• PyPI dgl: <= 2.4.0 (no fix yet)

Description

Impact Dgl implements rpc server (start_server() in rpc_server.py) for supporting the RPC communications among different remote users over networks. It relies on pickle serialize and deserialize to pack and unpack network messages. The is a known risk in pickle deserialization functionality that can be used for remote code execution. Patches TBD. Workarounds When running DGL distributed training and inference (DistDGL) make sure you do not assign public IPs to any instance in the cluster. References Issue #7874 Reported by Pinji Chen ([email protected]) from NISL lab (https://netsec.ccert.edu.cn/about) at Tsinghua University

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References