This vulnerability in Comma AI Openpilot 0.11 arises from the use of the Python pickle.load/pickle.loads functions in the selfdrive/modeld/modeld.py component. Improper handling of deserialization allows an attacker with local access and low privileges to manipulate the deserialization process, which can lead to compromise of confidentiality, integrity, and availability of the system. The vendor was contacted but did not provide any response or patch. The CVSS 4.0 score is 8.5, reflecting high severity with local attack vector and no user interaction required.

An attacker with local access and low privileges can exploit this vulnerability to execute arbitrary code or manipulate data through crafted pickle deserialization. This can result in full compromise of the affected system's confidentiality, integrity, and availability. Since the attack requires local access, remote exploitation is not possible based on the available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or vendor response is available, users should restrict local access to trusted users only and monitor for suspicious activity related to deserialization. Avoid running Openpilot 0.11 in untrusted environments until a fix is released.