VulnerabilityPublished
ZDI-26-931: (0Day) Meta fairseq AudioModalityConfig YAML File Parsing Code Injection Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 11 Nov 2026, 17:29 UTC
What to do
AI-suggested
Until a fix is available, avoid opening untrusted or unsolicited YAML configuration files related to Meta fairseq.
Description
A remote code execution vulnerability exists in Meta fairseq due to unsafe parsing of AudioModalityConfig YAML files. Exploitation requires user interaction, specifically opening a maliciously crafted file. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
References
Community reviews
Loading reviews…