VulnerabilityPublished
ZDI-26-937: (0Day) Meta fairseq quantize_with_kmeans Deserialization of Untrusted Data Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 11 Nov 2026, 17:28 UTC
What to do
AI-suggested
Until a fix is available, users should exercise caution when opening files or visiting untrusted web pages related to Meta fairseq. Monitor official Meta channels for updates and apply patches promptly once released.
Description
A remote code execution vulnerability exists in Meta fairseq's quantize_with_kmeans deserialization process. Exploitation requires user interaction such as visiting a malicious page or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
References
Community reviews
Loading reviews…