TI-2026-21201 CVE-2026-26210 · GHSA-w598-p4vc-7qcxKTransformers Unsafe Deserialization RCE via balance_servePriority HIGH 81KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deseria…CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00703 · Published 2026-04-23 · No fix listed CWE-502
