VulnerabilityPublished
ZDI-26-801: Meta FAIRChem Slab Deserialization of Untrusted Data Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 26 Oct 2026, 19:46 UTC
What to do
AI-suggested
Users should exercise caution when opening files or visiting untrusted webpages. Monitor vendor advisories for updates and apply official patches once released.
Description
A remote code execution vulnerability exists in Meta FAIRChem due to unsafe deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
References
Community reviews
Loading reviews…