ktransformers vulnerabilities and fixes
Recent CVEs affecting ktransformers, with upgrade or downgrade steps. 1 tracked.
ktransformers has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-04-23. Highest priority: CVE-2026-26210 (score 61/100).
- CVE-2026-26210 CRITICAL 9.8 UPGRADE KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode
FAQ
How do I fix ktransformers vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ktransformers being exploited right now?
None of the tracked ktransformers CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ktransformers CVE should I patch first?
CVE-2026-26210 currently ranks highest (61/100): KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode.