GitHub Advisoryadvisory · PyPI

GHSA-mrhh-3ggq-23p2 Horovod Vulnerable to Command Injection

CRITICAL Published 2025-03-20 Modified 2026-10-27 Official page ↗
Aliases
CVE-2024-10190
Ecosystem
PyPI
Packages
horovod
Severity
Critical
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502, CWE-77
Reviewed
2025-03-20

Affected packages

• PyPI horovod: <= 0.28.1 (no fix yet)

Description

Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability is due to improper handling of base64-encoded data in the `ElasticRendezvousHandler`, a subclass of `KVStoreHandler`. Specifically, the `_put_value` method in `ElasticRendezvousHandler` calls `codec.loads_base64(value)`, which eventually invokes `cloudpickle.loads(decoded)`. This allows an attacker to send a malicious pickle object via a PUT request, leading to arbitrary code execution on the server.

Related

Alias · CVE (1)

  • CVE-2024-10190 Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. vulnerability

Weakness · CWE (2)

  • CWE-502 Deserialization of Untrusted Data weakness
  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References