Angel-ML vulnerabilities
We track 1 vulnerability in Angel-ML products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Angel-ML vulnerabilities
- 8.1 High severity
angel: Deserialization of Untrusted Data
Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthenticated network attackers can instantiate arbitrary classes or exhaust coordinator memory by sending crafted serialized obj