Every CVE Search/ Get API key

CVE-2022-34668

NVFLARE unsafe deserialization due to Pickle

9.8 CriticalPublic exploitFix available

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

11.6%Up 10.5 points since Aug 29, 2022
90%50%10%1%

What each source reports

CVE List Score used 9.8

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Record
CVE-2022-34668
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-502
Updated
2026-11-02
EUVDEUVD-2022-0168 9.8

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Record
EUVD-2022-0168
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-6qv6-q77g-7qm6 9.8

NVFLARE unsafe deserialization due to Pickle

Impact

NVFLARE contains a vulnerability where deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

All versions before 2.1.4 are affected.

CVSS Score = 9.8

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Patches

The patch is included in nvflare==2.1.4 This new version uses MessagePack instead of Pickle to do serialization and deserialization.

Some object serializations supported by Pickle are not supported by MessagePack. We have provided out of box support for some built-in NVFLARE objects. For object serializations unsupported by MessagePack, the user will need to convert the objects to numpy or bytes before sending over to remote machines. The list of supported object types are listed in https://github.com/NVIDIA/NVFlare/blob/2.1/nvflare/fuel/utils/fobs/README.rst

Workarounds

No workarounds available.

Additional information

Issue Found by: Oliver Sellwood (Nintorac) and Elias Hohl

Record
GHSA-6qv6-q77g-7qm6
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-502
Updated
2026-11-02
NVD 9.8

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Record
CVE-2022-34668
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-502
Updated
2026-11-02
OSV 9.8

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Record
CVE-2022-34668
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-502
Updated
2026-11-02
OSVGHSA-6qv6-q77g-7qm6 9.8

NVFLARE unsafe deserialization due to Pickle

Impact

NVFLARE contains a vulnerability where deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

All versions before 2.1.4 are affected.

CVSS Score = 9.8

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Patches

The patch is included in nvflare==2.1.4 This new version uses MessagePack instead of Pickle to do serialization and deserialization.

Some object serializations supported by Pickle are not supported by MessagePack. We have provided out of box support for some built-in NVFLARE objects. For object serializations unsupported by MessagePack, the user will need to convert the objects to numpy or bytes before sending over to remote machines. The list of supported object types are listed in https://github.com/NVIDIA/NVFlare/blob/2.1/nvflare/fuel/utils/fobs/README.rst

Workarounds

No workarounds available.

Additional information

Issue Found by: Oliver Sellwood (Nintorac) and Elias Hohl

Record
GHSA-6qv6-q77g-7qm6
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-502
Updated
2026-11-02
OSVPYSEC-2022-257 No score

NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Record
PYSEC-2022-257
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nvflare
PyPI
 before 2.1.4
2.1.4
nvflare
PyPI
 before 2.1.4, plus listed versions
0.1.30.9.01.0.01.0.11.0.2
Show 25 moreShow less
1.1.01.1.12.0.02.0.12.0.102.0.112.0.122.0.132.0.142.0.152.0.162.0.182.0.192.0.22.0.32.0.42.0.52.0.62.0.72.0.82.0.92.1.02.1.12.1.22.1.3
2.1.4
nvflare
PyPI
 before 2.1.4, plus listed versions
0.1.30.9.01.0.01.0.11.0.2
Show 25 moreShow less
1.1.01.1.12.0.02.0.12.0.102.0.112.0.122.0.132.0.142.0.152.0.162.0.182.0.22.0.32.0.42.0.52.0.62.0.72.0.82.0.92.1.02.1.12.1.22.1.32.0.19
2.1.4

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBNVFLARE < 2.1.4 - Unsafe Deserialization due to Pickle2023-03-25

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-34668 is a critical vulnerability (CVSS 9.8) in Nvidia Nvflare, published August 29, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.6%, the 96th percentile. Fixed in nvflare 2.1.4.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open