Skip to main content
VulnerabilityPublished

ZDI-26-926: (0Day) Meta fairseq RawAudioDataset YAML File Parsing Code Injection Remote Code Execution Vulnerability

Source Zero Day Initiative

0
Severity
High

Rated High by Zero Day Initiative

Data as of 11 Nov 2026, 17:29 UTC

What to do

AI-suggested

Since this vulnerability requires user interaction via opening a malicious file, users should avoid opening untrusted or unexpected YAML files related to Meta fairseq. Monitor vendor advisories for updates and patches.

Description

A remote code execution vulnerability exists in Meta fairseq's RawAudioDataset YAML file parsing. Exploitation requires user interaction by opening a malicious file. The vulnerability has a high severity rating of 7.8 by ZDI.

References

Community reviews

Loading reviews…