LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050
Abstract
LlamaStack-RCE is a high-fidelity simulation and exploitation framework targeting CVE-2024-50050, a critical Remote Code Execution (RCE) vulnerability in the Meta Llama Stack. The vulnerability stems from Insecure Deserialization within the Python-based inference API, specifically through the use of the pickle module over ZeroMQ (0MQ) transport layers. This repository provides the full attack chain, from upstream supply chain poisoning to downstream execution and model weights exfiltration.
Fields of Study & Subjects
Adversarial Robustness in Machine Learning
Web Application Security Vulnerabilities
Security and Verification in Computing
Publication details
- Journal / source
- Zenodo (CERN European Organization for Nuclear Research)
- Publication date
- 17 January 2026