VulnerabilityPublished
ZDI-26-932: (0Day) Meta fairseq CtcCriterion YAML File Parsing Code Injection Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 11 Nov 2026, 17:29 UTC
What to do
AI-suggested
Since exploitation requires user interaction via opening a malicious file, users should avoid opening untrusted or suspicious YAML files related to Meta fairseq. Monitor vendor advisories for updates and apply patches once available.
Description
A remote code execution vulnerability exists in Meta fairseq's CtcCriterion YAML file parsing. Exploitation requires user interaction by opening a malicious file. The vulnerability has a high severity rating of 7.8 by ZDI.
References
Community reviews
Loading reviews…