CVE-2026-53805

Critical · CVSS 9.8

NVIDIA GEN3C — Unauthenticated Python pickle deserialization RCE

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: oss containerizable; CWE-502

Description

NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-model endpoints deserialize raw HTTP request bodies using Python's pickle.loads() without authentication or input validation. Attackers can supply a crafted payload containing a __reduce__ gadget to the inference API port to achieve remote code execution as the inference process.

Search profile — drives PoC discovery

Symbols pickle.loads__reduce__/request-inference/seed-modelinference APInv-tlabs/GEN3C

Keywords CVE-2026-53805GEN3Cpickle deserializationNVIDIA SILinference API RCEnv-tlabsunauthenticated RCEpickle.loads exploitGEN3C PoC

Versions: Prior to commit db2ffe12ced12ddafcec5e0422ee46ce8520746b

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

HORKimhab/CVE-2026-53805 needs review

recent activity

gh_search

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-15T00:00:20.000Z · profiled 2026-07-15T00:30:20.000Z