Remote Code Execution Vulnerability in AI Tensor Engine for ROCm

CVE-2026-49121

What is CVE-2026-49121?

The AI Tensor Engine for ROCm (AITER) is susceptible to an unauthenticated remote code execution vulnerability present in the MessageQueue.recv() function. This flaw enables attackers to send harmful pickle payloads to a ZMQ SUB socket, bypassing authentication and validation mechanisms. When attackers exploit this vulnerability, they can execute arbitrary code on every remote reader worker simultaneously by reaching the writer XPUB endpoint on the cluster network or using a forged Handle with a controlled remote_subscribe_addr. Immediate action is recommended to mitigate potential risks.

References