Unsafe deserialisation in the PKI implementation scheme of NVFlare

published 2022-06-22 4 y ago modified 2026-07-08 4 mo ago also GHSA-rcxc-3w2m-mp8h , PYSEC-2022-231 , EUVD-2022-0166

cvss: 9.8; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 2.1%; EPSS 2.1% chance of exploitation in 30 days, percentile 82%
public exploits: 0; none known

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe deserialization. The deserialization of Untrusted Data may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Patch / fix

fixed in 2 links 1

pypi nvflare 2.1.2
nvidia nvflare 2.1.2

github.com/NVIDIA/NVFlare@fd018ee commit

Exploit prediction

2.13% chance of exploitation in the next 30 days, higher than 82% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD	2.0	7.5	AV:N/AC:L/Au:N/C:P/I:P/A:P
GitHub	3.1	9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected packages

ecosystem	package	affected	fixed in
pypi	nvflare	<2.1.2	2.1.2

Affected products

NVIDIA NVIDIA FLARE

Classification

Weakness

CWE-502 Deserialization of Untrusted Data

References

github.com /NVIDIA/NVFlare/commit/fd018eea9dff925a765079a94c2f017920fcda67
web
github.com /NVIDIA/NVFlare/security/advisories/GHSA-rcxc-3w2m-mp8h
web, third-party-advisory, advisory
nvd.nist.gov /vuln/detail/CVE-2022-31604
advisory
github.com /NVIDIA/NVFlare
package
github.com /pypa/advisory-database/tree/main/vulns/nvflare/PYSEC-2022-231.yaml
web

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary