VulnerabilityPublished
ZDI-26-943: (0Day) Meta fairseq load_checkpoint_to_cpu Deserialization of Untrusted Data Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 11 Nov 2026, 17:26 UTC
What to do
AI-suggested
Users should avoid opening untrusted files or visiting untrusted web pages that could trigger this vulnerability until a vendor advisory or patch is released. Monitor for updates from Meta or the Zero Day Initiative for remediation guidance.
Description
A remote code execution vulnerability exists in Meta fairseq's load_checkpoint_to_cpu function. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The vulnerability has a high severity rating with a CVSS score assigned by ZDI of 7.8.
References
Community reviews
Loading reviews…