Meta FAIRChem AdsorbMLRunner deserialization flaw allows remote code execution
Original title: ZDI-26-803: Meta FAIRChem AdsorbMLRunner Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZDI-26-803 is rated CVSS 7.8 and needs a user to open a file or visit a page.
The Zero Day Initiative published ZDI-26-803, a deserialization-of-untrusted-data flaw in the AdsorbMLRunner component of Meta FAIRChem. Remote attackers can execute arbitrary code if a user opens a malicious file or visits a malicious page. ZDI assigned CVSS 7.8. The snippet lists no versions, fix, or CVE.
- Advisory identifier is ZDI-26-803.
- ZDI assigned a CVSS rating of 7.8.
- The target must visit a malicious page or open a malicious file.
- No affected versions, fixed release, or CVE is stated.
Impact: arbitrary code execution on FAIRChem installations
| Product | Affected |
|---|---|
| Meta FAIRChem | — |
- Vendors
- Meta
- Products
- FAIRChem
- Organizations
- Zero Day Initiative
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Meta FAIRChem. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.