Horovod versions up to 0.28.1 contain a critical insecure deserialization vulnerability in the KVStore HTTP server component. This component lacks authentication and authorization, allowing remote attackers to write arbitrary data via HTTP PUT requests. The KVStore server deserializes data using cloudpickle.loads() without verifying its source, enabling attackers to execute arbitrary code remotely by sending malicious pickle payloads.