AI Tensor Engine for ROCm (AITER) through version 0.1.14 contains a critical unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadcast.py. The vulnerability allows remote attackers to execute arbitrary code by sending malicious pickle payloads to ZMQ SUB sockets without authentication, HMAC, or format validation. Attackers can exploit this by reaching the writer XPUB endpoint on cluster networks or by supplying forged Handles with attacker-controlled remote_subscribe_addr. Successful exploitation results in arbitrary code execution on all remote reader workers simultaneously as the inference worker process.