KTransformers up to version 0.5.3 deserializes incoming messages from its balance_serve backend using pickle.loads() without any validation or authentication. The scheduler RPC server binds a ZMQ ROUTER socket on all interfaces, leaving it openly accessible. An attacker who can reach this socket can craft a malicious pickle payload, causing the ktransformers process to execute arbitrary code with its current privileges, potentially compromising the entire system.

The affected product is KTransformers by kvcache-ai. Versions through 0.5.3 contain the flaw; the product is released under the name "ktransformers". No newer version is referenced in the data provided.

The CVSS score of 9.3 reflects a high-impact Remote Code Execution vulnerability. The EPSS score, while less than 1%, indicates that the exploit potential is low but not negligible, as the vulnerability is straightforward to exploit by sending a crafted payload to the exposed ZMQ socket. The vulnerability is not listed in the CISA KEV catalog. The attack vector is likely remote network, requiring the attacker to reach the machine hosting the ZMQ service, which is currently bound to all network interfaces.