{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.6.0"}],"component":"paddlepaddle","cve_ids":["CVE-2024-0917"],"ecosystem":"PyPI","epss":0.01652,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mrmm-qmrj-xgp6","id":"tcs_01M5KFRN4RPCEFTH1DH8NAKHNA","modified_at":"2026-09-10T03:50:10.653611495Z","published_at":"2024-03-07T09:30:33Z","references":["https://osv.dev/vulnerability/GHSA-mrmm-qmrj-xgp6","https://nvd.nist.gov/vuln/detail/CVE-2024-0917","https://github.com/PaddlePaddle/Paddle","https://github.com/PaddlePaddle/Paddle/blob/develop/python/paddle/distributed/fleet/utils/fs.py#L723","https://huntr.com/bounties/2d840735-e255-4700-9709-6f7361829119"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mrmm-qmrj-xgp6","url":"https://osv.dev/vulnerability/GHSA-mrmm-qmrj-xgp6"}],"summary":"PaddlePaddle vulnerable to remote code execution"}