/ 
GRID-Machine-0.127
Security Advisories (1)
CVE-2026-4851 (2026-03-29)

GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization. GRID::Machine provides Remote Procedure Calls (RPC) over SSH for Perl. The client connects to remote hosts to execute code on them. A compromised or malicious remote host can execute arbitrary code back on the client through unsafe deserialization in the RPC protocol. read_operation() in lib/GRID/Machine/Message.pm deserialises values from the remote side using eval() $arg .= '$VAR1'; my $val = eval "no strict; $arg"; # line 40-41 $arg is raw bytes from the protocol pipe. A compromised remote host can embed arbitrary perl in the Dumper-formatted response: $VAR1 = do { system("..."); }; This executes on the client silently on every RPC call, as the return values remain correct. This functionality is by design but the trust requirement for the remote host is not documented in the distribution.

Documentation

Makefile.PL
GRID::Machine::Core
Module loaded when bootstraping the remote Perl server
GRID::Machine::Message
Primitives for sending and receiving
GRID::Machine::REMOTE
The server that runs on the other side of the SSH link
GRID::Machine::perlparintro
A brief and basic introduction to Parallel Distributed Computing in Perl
GRID::Machine::remotedebugtut
A simple methodology to debug remote Perl programs with GRID::Machine
remotetest.pl
make tests on a remote machine

Modules

GRID::Machine
Remote Procedure Calls over a SSH link
GRID::Machine::Group
Parallel Computing via SSH
GRID::Machine::IOHandle
Supply object methods for Remote I/O handles
GRID::Machine::MakeAccessors
Home Made "Make accessors" for a Class
GRID::Machine::Process
Forking via SSH
GRID::Machine::RIOHandle
Remote side of the Remote Input-Output
GRID::Machine::Result
The object describing the result of a GRID::Machine RPC

Provides

GRID::Machine
in lib/GRID/Machine/Message.pm
GRID::Machine
in lib/GRID/Machine/REMOTE.pm
GRID::Machine::Group::Result
in lib/GRID/Machine/Group.pm
GRID::Machine::Process::Result
in lib/GRID/Machine/Process.pm
GRID::Machine::RemoteSub
in lib/GRID/Machine/REMOTE.pm

Examples

Other files