Meta Detectron2 Vulnerable to RCE via Untrusted Data Deserialization
A deserialization vulnerability in Meta's Detectron2 library allows remote attackers to execute arbitrary code on affected systems.
Zero Day Initiative (ZDI) has disclosed a critical remote code execution (RCE) vulnerability, tracked as ZDI-26-907, affecting Meta's Detectron2 library. The flaw resides within the vertex_feature_embedder component and stems from the improper validation of user-supplied data during the parsing of pickle checkpoint files. This allows attackers to deserialize untrusted data, leading to the execution of arbitrary code in the context of the current process.
The vulnerability requires user interaction for exploitation, meaning an attacker must trick a victim into visiting a malicious webpage or opening a specially crafted file. Despite the interaction requirement, the CVSS score of 7.8 indicates a significant risk. The technical details reveal that the core issue lies in how the library handles serialized data, a common vector for deserialization vulnerabilities.
Meta Detectron2 is a popular open-source object detection library developed by Meta AI, widely used in machine learning research and development for tasks such as image recognition and object tracking. Its widespread adoption means that a successful exploitation of this vulnerability could have a broad impact across various research institutions and companies utilizing the library for their AI models.
The disclosure timeline indicates that ZDI initially reported the vulnerability to Meta on March 26, 2026. Meta acknowledged the report on the same day. After follow-ups from ZDI, and with the vendor not providing a patch, ZDI proceeded with a coordinated public release of the advisory on November 11, 2026, classifying it as a zero-day advisory due to the lack of a readily available fix.
Given the nature of the vulnerability, which involves deserialization of untrusted data, the primary mitigation strategy recommended by ZDI is to restrict interaction with the product. This means users should be cautious about loading or processing any checkpoint files or data from untrusted sources. Organizations should also consider implementing stricter input validation and sandboxing measures for any applications that rely on Detectron2.
This vulnerability highlights a recurring theme in the cybersecurity landscape: the inherent risks associated with deserialization functions, particularly when handling data from external or untrusted sources. Libraries and frameworks that process serialized data, such as Python's pickle, are frequent targets for attackers seeking to achieve remote code execution.
Researchers at TrendAI Zero Day Initiative, specifically Mat Powell, are credited with discovering and reporting this vulnerability. The advisory serves as a crucial alert to users and administrators of Meta Detectron2, urging them to exercise extreme caution and await further guidance or patches from Meta regarding mitigation or remediation steps.
As of the advisory's publication, no specific CVE identifier has been assigned, and Meta has not yet released a patch. Users are advised to monitor Meta's official channels for security updates and to implement the suggested mitigation strategies to protect their systems from potential exploitation.
This advisory from Zero Day Initiative (ZDI) provides further technical details on the Detectron2 deserialization vulnerability, assigning it the identifier ZDI-26-912. The disclosure timeline reveals that ZDI reported the issue to Meta on March 4, 2026, and after vendor acknowledgment and investigation, it was determined to be a duplicate of a previously reported issue. ZDI ultimately published this as a 0-day advisory on November 11, 2026, after notifying the vendor of their intent to publish.
This advisory from Zero Day Initiative provides further technical details on the Meta Detectron2 deserialization vulnerability, including a disclosure timeline that spans from March 26, 2026, to the coordinated public release on November 11, 2026. The vulnerability, identified as ZDI-26-910, was reported by researcher Bongeun Koo and carries a CVSS score of 7.8, requiring user interaction for exploitation.
This advisory from Zero Day Initiative (ZDI-26-911) details a deserialization vulnerability within Meta's Detectron2 library, specifically concerning the parsing of pickle checkpoint files. The vulnerability, discovered by Mat Powell of TrendAI, allows for remote code execution when a user interacts with a malicious file or webpage, and carries a CVSS score of 7.8. The disclosure timeline indicates the vulnerability was reported to the vendor on March 26, 2026, with coordinated public release on November 11, 2026, and no patches are currently available, recommending only interaction restriction as a mitigation.
This advisory provides further technical details on the vulnerability, including the specific method CfgNode.merge_from_file that is affected. It highlights that the flaw stems from a lack of proper validation of user-supplied data, leading to the deserialization of untrusted data. The vulnerability has a CVSS score of 7.8 and requires user interaction for exploitation.
This advisory from Zero Day Initiative provides further technical details on the deserialization vulnerability affecting Meta Detectron2. It specifies that the flaw lies within the parsing of pickle files, where a lack of proper validation allows for the deserialization of untrusted data. The disclosure timeline indicates that the vulnerability was reported to the vendor on March 26, 2026, and was publicly disclosed on November 11, 2026, with the assigned CVSS score of 7.8.