VulnerabilityPublished
ZDI-26-949: (0Day) Meta FAIRChem utils load_model_and_weights_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
Source Zero Day Initiative
0
Severity
HighRated High by Zero Day Initiative
Data as of 11 Nov 2026, 17:26 UTC
What to do
AI-suggested
In the absence of an official fix, users should exercise caution when opening files or visiting untrusted web pages related to Meta FAIRChem.
Description
A remote code execution vulnerability exists in Meta FAIRChem's utils load_model_and_weights_from_checkpoint function due to deserialization of untrusted data. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
References
Community reviews
Loading reviews…