Skip to main content
VulnerabilityPublished

ZDI-26-907: (0Day) Meta Detectron2 vertex_feature_embedder Deserialization of Untrusted Data Remote Code Execution Vulnerability

Source Zero Day Initiative

0
Severity
High

Rated High by Zero Day Initiative

Data as of 11 Nov 2026, 16:51 UTC

What to do

AI-suggested

Users should exercise caution when opening files or visiting links from untrusted sources. Monitor vendor advisories for updates and apply official fixes once released.

Description

Meta Detectron2 contains a remote code execution vulnerability due to deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has a high severity rating of 7.8 by ZDI.

References

Community reviews

Loading reviews…