VulnerabilityPublished
ZDI-26-938: (0Day) Meta fairseq parse_manifest Code Injection Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 11 Nov 2026, 17:27 UTC
What to do
AI-suggested
Until a fix is available, users should exercise caution when opening files or visiting untrusted websites to mitigate the risk of exploitation.
Description
A remote code execution vulnerability exists in Meta fairseq's parse_manifest functionality. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8 by the Zero Day Initiative.
References
Community reviews
Loading reviews…