https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:09:42.139688+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-90614 CVE-2026-90614 — FedML-AI FedML MQTT+S3 Communication Backend remote_storage.py S3Storage.read_model deserialization 2026-10-06T08:09:42.155954+00:00

Affected: FedML-AI FedML

A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/communication/s3/remote_storage.py of the component MQTT+S3 Communication Backend. This manipulation of the argument s3_key_str causes deserialization. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.