VulnerabilityPublished
ZDI-26-925: (0Day) Meta fairseq FairseqLAMB YAML File Parsing Code Injection Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 11 Nov 2026, 17:29 UTC
What to do
AI-suggested
Since this is not a cloud service, users should avoid opening untrusted YAML files with Meta fairseq FairseqLAMB until a vendor advisory or patch is released. Monitor official Meta and ZDI advisories for updates on remediation.
Description
A remote code execution vulnerability exists in Meta fairseq's FairseqLAMB YAML file parsing. Exploitation requires user interaction by opening a malicious file. The vulnerability has a high severity rating with a CVSS score of 7.8 assigned by ZDI.
References
Community reviews
Loading reviews…