Skip to main content
VulnerabilityPublished

ZDI-26-953: (0Day) Meta FAIRChem utils load_inference_model Deserialization of Untrusted Data Remote Code Execution Vulnerability

Source Zero Day Initiative

0
Severity
High

Rated High by Zero Day Initiative

Data as of 11 Nov 2026, 17:26 UTC

What to do

AI-suggested

Users and administrators should exercise caution with untrusted files and links to mitigate risk. Monitor official Meta FAIRChem advisories for updates and apply patches promptly once available.

Description

A remote code execution vulnerability exists in Meta FAIRChem's utils load_inference_model function due to deserialization of untrusted data. Exploitation requires user interaction such as visiting a malicious page or opening a malicious file. The vulnerability has a high severity rating of 7.8 assigned by ZDI.

References

Community reviews

Loading reviews…