Home » Database

AVID-2026-R1366

Description

Unauthenticated Remote Code Execution in ElasticRendezvousHandler in horovod/horovod (CVE-2024-10190)

Details

Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability is due to improper handling of base64-encoded data in the ElasticRendezvousHandler, a subclass of KVStoreHandler. Specifically, the _put_value method in ElasticRendezvousHandler calls codec.loads_base64(value), which eventually invokes cloudpickle.loads(decoded). This allows an attacker to send a malicious pickle object via a PUT request, leading to arbitrary code execution on the server.

Reason for inclusion in AVID: CVE-2024-10190 describes unauthenticated remote code execution via deserialization in Horovod’s ElasticRendezvousHandler. Horovod is a software library widely used in AI model training and distributed ML pipelines, making this a software supply chain vulnerability affecting AI systems. The report includes the vulnerability details (attack via base64-encoded data leading to code execution), affected versions, CVSS metrics, and references, providing sufficient signal for curation.

References

Affected or Relevant Artifacts

  • Developer: horovod
  • Deployer: horovod
  • Artifact Details:
TypeName
Systemhorovod/horovod

Impact

AVID Taxonomy Categorization

  • Risk domains: Security
  • SEP subcategories: S0100: Software Vulnerability
  • Lifecycle stages: L06: Deployment

CVSS

Version3.0
Vector StringCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score9.8
Base Severity🔴 Critical
Attack VectorNETWORK
Attack Complexity🟢 Low
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality Impact🔴 High
Integrity Impact🔴 High
Availability Impact🔴 High

CWE

IDDescription
CWE-502CWE-502 Deserialization of Untrusted Data

Other information

  • Report Type: Advisory
  • Credits:
  • Date Reported: 2025-03-20
  • Version: 0.3.3
  • AVID Entry