ZDI-26-935: (0Day) Meta fairseq FConvModelSelfAtt YAML File Parsing Code Injection Remote Code Execution Vulnerability

Impact

Successful exploitation leads to arbitrary code execution on affected installations of Meta fairseq, potentially allowing attackers to take control of the system where the vulnerable software is running. User interaction is required, limiting the attack vector to scenarios where a user opens a malicious YAML file.