9.8
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: има публичен пример за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands by sending malicious HTTP POST requests. Attackers can exploit insecure pickle deserialization of request bodies to achieve code execution on the host system running the exposed service.
Засегнати продукти
- Beijing Academy of Artificial Intelligence (BAAI) OmniGen2-RL: 0
Вид слабост
История
- 18 март 2026 Публикувано
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-25873
- https://nvd.nist.gov/vuln/detail/CVE-2026-25873
- https://github.com/VectorSpaceLab/OmniGen2/pull/139
- https://chocapikk.com/posts/2026/omnigen2-pickle-rce/
- https://arxiv.org/abs/2506.18871
- https://github.com/VectorSpaceLab/OmniGen2/blob/3a13017e532f9f309a38bca571fd62200a6415c5/OmniGen2-RL/reward_server/reward_server.py#L118
- https://github.com/VectorSpaceLab/OmniGen2/blob/3a13017e532f9f309a38bca571fd62200a6415c5/OmniGen2-RL/reward_server/reward_proxy.py#L208
- https://github.com/VectorSpaceLab/OmniGen2/blob/3a13017e532f9f309a38bca571fd62200a6415c5/OmniGen2-RL/reward_server/reward_proxy.py#L224
- https://www.vulncheck.com/advisories/omnigen2-rl-reward-server-unsafe-deserialization-rce