Vulnerability · Published Jun 17, 2026 · Assigned by VulnCheck

CVE-2026-53805NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API

Critical 9.8

In plain English

A critical-severity unsafe deserialization in GEN3C from nv-tlabs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.9%top 40.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-inference and /seed-model endpoints deserialize raw HTTP request bodies using Python's pickle.loads() without authentication or input validation. Attackers can supply a crafted payload containing a __reduce__ gadget to the inference API port to achieve remote code execution as the inference process.

Affected products (as reported)

Vendor	Product	Versions
nv-tlabs	GEN3C	0 – before db2ffe12ced12ddafcec5e0422ee46ce8520746b

Weakness: CWE-502 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/nv-tlabs/GEN3C/pull/62 issue-tracking
https://github.com/nv-tlabs/GEN3C/pull/63 issue-tracking
https://github.com/nv-tlabs/GEN3C/commit/db2ffe12ced12ddafcec5e0422ee46ce8520746b patch
https://www.vulncheck.com/advisories/nvidia-sil-gen3c-unauthenticated-rce-via-pickle-deserialization-in-inference-api third-party-advisory