VulnerabilityPublished
ZDI-26-928: (0Day) Meta fairseq W2lConvGluEncoder YAML File Parsing Code Injection Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 11 Nov 2026, 17:29 UTC
What to do
AI-suggested
Users should exercise caution when opening YAML files from untrusted sources. Monitor vendor advisories for updates and apply official patches once released.
Description
A remote code execution vulnerability exists in Meta fairseq's W2lConvGluEncoder YAML file parsing. Exploitation requires user interaction, specifically opening a malicious YAML file. The vulnerability is rated high severity with a CVSS score of 7.8 assigned by ZDI.
References
Community reviews
Loading reviews…