Security Advisory

CVE-2024-50050

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-23 13:35:17
Last updated 2024-10-24 18:26:22
Assigner facebook
State PUBLISHED

Description

Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket communication, potentially allowing for remote code execution. Socket communication has been changed to use JSON instead.