CVE-2024-12044

A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the `pickle.loads()` function in the `all_reduce_dict()` distributed training API without proper sanitization. This allows an attacker to execute arbitrary code by broadcasting a malicious payload to the distributed training network.

• CWE-502

• https://huntr.com/bounties/f7e4fc32-e167-49fb-9fc7-f092b9c27e8a

Published

Mar 20, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12039langgenius/dify version v0.10.1 contains a vulnerability whe…8.1
• CVE-2024-1204The Meta Box WordPress plugin before 5.9.4 does not prevent…4.3
• CVE-2024-12040The Product Carousel Slider & Grid Ultimate for WooCommerce …8.8
• CVE-2024-12041The Directorist: AI-Powered WordPress Business Directory Plu…5.3
• CVE-2024-12042The MStore API – Create Native Android & iOS Apps On The Clo…5.4
• CVE-2024-12043The Prime Slider – Addons For Elementor (Revolution of a sli…5.4
• CVE-2024-12045The Essential Blocks – Page Builder Gutenberg Blocks, Patter…4.8
• CVE-2024-12046The Medical Addon for Elementor plugin for WordPress is vuln…4.3
• CVE-2024-12047The WP Compress – Instant Performance & Speed Optimization p…6.1
• CVE-2024-12048An IDOR (Insecure Direct Object Reference) vulnerability exi…8.8
• CVE-2024-12049The Woo Ukrposhta plugin for WordPress is vulnerable to Refl…6.1
• CVE-2024-1205The Management App for WooCommerce – Order notifications, Or…8.8