Report: - FedML-AI FedML gRPC server grpc_server.py sendMessage deserialization CVE-2026-5536

Report: - FedML-AI FedML gRPC server grpc_server.py sendMessage deserialization CVE-2026-5536

CVE ID :CVE-2026-5536 Published : April 5, 2026, 4:16 a.m. | 16 minutes ago Description :A weakness has been identified in FedML-AI FedML up to 0.8.9. Affected is the function sendMessage of the file grpc_server.py of the component gRPC server. Executing a manipulation can lead to deserialization. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 7.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
April 5, 2026