CVE-2026-14621: Exposure of Data Element to Wrong Session in FederatedAI FATE
A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.initEggroll of the file java/osx/osx-broker/src/main/java/org/fedai/osx/broker/grpc/QueuePushReqStreamObserver.java of the component OSX Broker. Such manipulation of the argument rollSiteSessionId/dstRole/dstPartyId leads to exposure of data element to wrong session. The attack can be executed remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.
AI Analysis
Technical Summary
This vulnerability in FederatedAI FATE (<=2.2.0) affects the OSX Broker component's QueuePushReqStreamObserver.initEggroll function. Manipulation of the arguments rollSiteSessionId, dstRole, and dstPartyId can cause data elements to be exposed to the wrong session. The attack vector is network-based with high complexity and low privileges required. No official patch or remediation is currently available, though a pull request for a fix is pending acceptance. Exploit code has been publicly disclosed but exploitation is considered difficult.
Potential Impact
Exposure of data elements to incorrect sessions may lead to unauthorized data disclosure within the federated learning environment. However, the low CVSS score (2.3) and high attack complexity indicate limited practical impact and difficulty in exploitation. No privilege escalation, integrity, or availability impacts are indicated.
Mitigation Recommendations
No official fix or patch is currently available. A pull request addressing the issue is pending acceptance. Users should monitor the vendor's advisories for the official patch release. Until then, no specific mitigation actions are documented. Given the low severity and high complexity, immediate urgent action is not required.
CVE-2026-14621: Exposure of Data Element to Wrong Session in FederatedAI FATE
Description
A vulnerability has been found in FederatedAI FATE up to 2.2.0. This affects the function QueuePushReqStreamObserver.initEggroll of the file java/osx/osx-broker/src/main/java/org/fedai/osx/broker/grpc/QueuePushReqStreamObserver.java of the component OSX Broker. Such manipulation of the argument rollSiteSessionId/dstRole/dstPartyId leads to exposure of data element to wrong session. The attack can be executed remotely. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.
CVSS v4.0
Score 2.3low
Affected software
pkg:github/federatedai/FATEcpe:2.3:a:federatedai:fate:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in FederatedAI FATE (<=2.2.0) affects the OSX Broker component's QueuePushReqStreamObserver.initEggroll function. Manipulation of the arguments rollSiteSessionId, dstRole, and dstPartyId can cause data elements to be exposed to the wrong session. The attack vector is network-based with high complexity and low privileges required. No official patch or remediation is currently available, though a pull request for a fix is pending acceptance. Exploit code has been publicly disclosed but exploitation is considered difficult.
Potential Impact
Exposure of data elements to incorrect sessions may lead to unauthorized data disclosure within the federated learning environment. However, the low CVSS score (2.3) and high attack complexity indicate limited practical impact and difficulty in exploitation. No privilege escalation, integrity, or availability impacts are indicated.
Mitigation Recommendations
No official fix or patch is currently available. A pull request addressing the issue is pending acceptance. Users should monitor the vendor's advisories for the official patch release. Until then, no specific mitigation actions are documented. Given the low severity and high complexity, immediate urgent action is not required.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-07-03T16:52:34.586Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a48c2a727e9c79719cc2fe8
Added to database: 07/04/2026, 08:21:59 UTC
Last enriched: 07/11/2026, 08:57:12 UTC
Last updated: 08/18/2026, 10:54:22 UTC
Views: 110
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.