ktransformers through version 0.6.3 has a critical unauthenticated remote code execution vulnerability due to unsafe deserialization of untrusted pickle data sent to the SchedulerServer ZMQ ROUTER socket. Attackers can craft pickle payloads containing malicious __reduce__ methods that execute arbitrary shell commands with the privileges of the server process. The vulnerability affects all versions up to and including 0.6.3 and was fixed in a specific commit (def0f93). No official vendor advisory or patch release information is provided in the input data.

Successful exploitation allows remote attackers to execute arbitrary commands on the server running ktransformers without authentication, potentially leading to full system compromise. The vulnerability has a CVSS 4.0 score of 9.3, indicating critical severity with network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability was fixed in commit def0f93, so upgrading to a version including this fix or applying the patch from that commit is recommended once available. Until patched, restrict access to the SchedulerServer ZMQ ROUTER socket to trusted networks or hosts to reduce exposure.