Skip to main content
VulnerabilityPublished

ZDI-26-908: (0Day) Meta Detectron2 load_proposals_into_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability

Source Zero Day Initiative

0
Severity
High

Rated High by Zero Day Initiative

Data as of 11 Nov 2026, 16:51 UTC

What to do

AI-suggested

Until a fix is available, users should avoid opening untrusted files or visiting untrusted web pages that could trigger the vulnerability.

Description

A remote code execution vulnerability exists in Meta Detectron2's load_proposals_into_dataset function. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The vulnerability has a high severity rating assigned by the Zero Day Initiative.

References

Community reviews

Loading reviews…