Skip to content
OpenAdvisories

Vendor

FedML-AI

3 known vulnerabilities.

Products

FedML 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-90614

    FedML-AI FedML MQTT+S3 Communication Backend remote_storage.py S3Storage.read_model deserialization

    A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/communication/s3/remote_storage.py of the component MQTT+S3 Communication Backend. This manipulation o…

    FedML-AI FedML
  • Medium 4.3
    CVE-2026-5535

    FedML-AI FedML MQTT Message FileUtils.java path traversal

    A security flaw has been discovered in FedML-AI FedML up to 0.8.9. This impacts an unknown function of the file FileUtils.java of the component MQTT Message Handler. Performing a manipulation of the argument dataSet results in path traversal. The attack is po…

    FedML-AI FedML