The vulnerability in Horovod's KVStore HTTP server component allows unauthenticated remote attackers to write arbitrary data via HTTP PUT requests. The KVStore server is used for distributed task coordination and does not enforce authentication or authorization controls. When a Horovod worker retrieves data from the KVStore using HTTP GET, it deserializes the data using cloudpickle.loads() without validation. This insecure deserialization can be exploited by an attacker who sends a crafted malicious pickle payload to the KVStore server before legitimate data is written, resulting in arbitrary code execution on the worker node.

Successful exploitation results in remote code execution on Horovod worker nodes, potentially allowing attackers to execute arbitrary commands or code within the context of the worker process. This can lead to full compromise of the affected system running the Horovod worker.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the KVStore HTTP server to trusted entities only, and avoid exposing it to untrusted networks. Consider implementing external controls such as network segmentation or firewall rules to limit access. Monitor vendor channels for updates or official patches addressing this vulnerability.