ZDI publishes 10 unpatched Meta fairseq zero-day RCE flaws
First merged summary.
ZDI disclosed 10 unpatched Meta fairseq zero-days that can run code after a user opens a malicious file or page.
Trend Micro's Zero Day Initiative published 10 unpatched remote code-execution advisories affecting Meta's fairseq library, all scored CVSS 7.8 and labeled zero-days. Nine are YAML file-parsing code-injection flaws in named model or optimizer components; ZDI-26-943 is untrusted-data deserialization in load_checkpoint_to_cpu. Exploitation requires a user to open a malicious file, and for ZDI-26-943 a malicious page or file. None of the notices names affected builds, a fix, or a CVE.
- Ten advisories: ZDI-26-914, 922, 923, 924, 927, 928, 929, 930, 935, and 943.
- Nine issues are YAML parsing code injection; ZDI-26-943 is checkpoint deserialization.
- Every advisory is labeled a zero-day and scored CVSS 7.8 by ZDI.
- The user must open a malicious file; ZDI-26-943 also cites a malicious page.
- No affected versions, patches, or CVE identifiers are stated.
Timeline
dated events in the reporting · oldest first- Nov 11, 2026ZDI publishes 10 unpatched Meta fairseq RCE advisories. · ZDI Published Advisories
What each outlet adds
beyond the shared facts- ZDI Published AdvisoriesNames all 10 advisory IDs, components, CVSS 7.8, and user interaction.
- Vendors
- Meta
- Products
- fairseq
- Organizations
- Zero Day Initiative
Coverage
oldest first · one row per article · UTC- · 14h ago
ZDI Published AdvisoriesFirst report
Meta fairseq FConvModelSelfAtt YAML parsing allows remote code execution
ZDI-26-935 is an unpatched code-injection bug rated 7.8 that needs a user to open a file.
- · 14h ago
Meta fairseq HubertModel YAML parsing allows remote code execution
The unpatched flaw needs a user to open a malicious file and carries a ZDI CVSS score of 7.8.
- · 14h ago
Meta fairseq MultiresHubertModel YAML parsing allows code injection
ZDI-26-933 is rated 7.8 and needs a user to open a malicious file; no CVE or patched release is stated.
- · 14h ago
Meta fairseq quantize_with_kmeans flaw allows remote code execution
ZDI-26-937 is an unpatched deserialization bug rated 7.8 that needs a malicious page or file.
- · 14h ago
Meta fairseq Wav2Vec2Model YAML parsing bug allows remote code execution
ZDI rates the unpatched flaw 7.8; a user must open a malicious file before code runs.
- · 14h ago
Meta fairseq W2lConvGluEncoder YAML parsing flaw enables RCE (ZDI-26-928)
ZDI scores the unpatched bug 7.8; code runs only if a user opens a malicious file.
- · 14h ago
Meta fairseq FairseqAdamax YAML parsing flaw enables RCE (ZDI-26-929)
The unpatched issue scores CVSS 7.8 and needs a user to open a crafted file.
- · 14h ago
Meta fairseq TransformerLanguageModel YAML bug allows code execution
ZDI-26-921 is an unpatched fairseq flaw rated 7.8 that needs a user to open a file.
- · 14h ago
Meta fairseq FairseqLAMB YAML parsing allows remote code execution
Opening a crafted file is required; ZDI scores the unpatched issue 7.8 and names no patch.
- · 14h ago
Meta fairseq CtcCriterion YAML parsing allows code injection
ZDI-26-932 carries a 7.8 score and requires opening a malicious file; no CVE or fixed version is listed.
- · 14h ago
Meta fairseq dump_km_label deserialization flaw allows RCE (ZDI-26-940)
Untrusted data deserialized by dump_km_label can run code; ZDI rates the zero-day 7.8.
- · 14h ago
Meta fairseq S2TWavTransformerEncoder YAML parsing allows RCE
ZDI scores the zero-day 7.8 and says the victim must open a malicious file; no fix is listed.
- · 14h ago
Meta fairseq FairseqCPUAdam YAML parsing allows remote code execution
ZDI-26-936 is an unpatched code-injection flaw rated 7.8 that requires opening a malicious file.
- · 14h ago
Meta fairseq RawAudioDataset YAML parsing allows remote code execution
ZDI rates the unpatched flaw 7.8; a user must open a malicious file, and no fix is named.
- · 14h ago
Meta fairseq YAML parsing flaw allows code execution (ZDI-26-919)
ZDI rates the FairseqAdafactor zero-day 7.8; the user must open a malicious file.
- · 14h ago
Meta fairseq Data2VecAudioModel YAML parsing bug allows code execution
ZDI-26-920 is an unpatched fairseq flaw rated 7.8 that requires opening a malicious file.
- · 14h ago
Meta fairseq LightConvLanguageModel YAML parsing flaw enables RCE (ZDI-26-930)
ZDI rates the unpatched flaw 7.8; a user must open a malicious file before code runs.
- · 14h ago
Meta fairseq FConvLanguageModel YAML parsing allows code injection
ZDI-26-934 rates the unpatched flaw 7.8; the victim must open a malicious file, and no CVE or fixed version is given.
- · 14h ago
Meta fairseq Wav2Vec YAML parsing can run code (ZDI-26-914)
ZDI rates the unpatched flaw 7.8; a user must open a malicious file for code execution.
- · 14h ago
Meta fairseq AudioModalityConfig YAML parsing allows code injection
ZDI-26-931 is scored 7.8 and requires a user to open a malicious file; no CVE or patch version is stated.
- · 14h ago
Meta fairseq load_checkpoint_to_cpu allows RCE (ZDI-26-943)
ZDI scores the unpatched deserialization bug 7.8 and says a malicious file or page is required.
- · 14h ago
Meta fairseq FairseqAdam YAML parsing flaw enables RCE (ZDI-26-927)
Opening a malicious file is required; ZDI rates the unpatched issue CVSS 7.8.
- · 14h ago
Meta fairseq2 checkpoint loader deserialization flaw allows RCE (ZDI-26-939)
FileCheckpointManager _load_state_dict can run code from untrusted data; ZDI scores it 7.8.
- · 14h ago
fairseq VGGTransformerModel YAML parsing zero-day allows code execution
ZDI-26-918 rates the unpatched Meta fairseq YAML code-injection bug CVSS 7.8 if a malicious file is opened.
- · 14h ago
Meta fairseq YAML parsing flaw allows code execution (ZDI-26-941)
Opening a malicious YAML file can trigger code injection in FConvModel; ZDI scores it 7.8.