{"id":151,"date":"2026-10-29T07:10:40","date_gmt":"2026-10-29T07:10:40","guid":{"rendered":"https:\/\/bugskan.com\/?p=151"},"modified":"2026-10-29T07:10:41","modified_gmt":"2026-10-29T07:10:41","slug":"ai-model-metadata-enabled-code-execution-in-three-python-library-workflows","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/ai-model-metadata-enabled-code-execution-in-three-python-library-workflows\/","title":{"rendered":"AI model metadata enabled code execution in three Python library workflows"},"content":{"rendered":"<p>Unit 42 disclosed model-loading vulnerabilities in NeMo, Uni2TS and FlexTok. Malicious metadata could cause vulnerable library workflows to instantiate unintended code, even when the model\u2019s underlying format appeared safer than a conventional executable artifact.<\/p>\n<p>The researchers reported fixes in NeMo 2.3.2, a June 2025 FlexTok code update and a July 31, 2025 Uni2TS fix. The associated identifiers include CVE-2025-23304 and CVE-2026-22584.<\/p>\n<p>Unit 42 said it had found no malicious examples exploiting these issues as of December 2025. Check the specific library and loading path, apply its fix and isolate processing of untrusted models. Download counts are not evidence that every model or user was compromised.<\/p>\n<p><a href=\"https:\/\/unit42.paloaltonetworks.com\/rce-vulnerabilities-in-ai-python-libraries\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Unit 42\u2019s research covered NeMo, Uni2TS and FlexTok, demonstrating why model-loading safety extends beyond tensor formats.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_e59b1b880dcef7","bugskan_event_type":"vulnerability","bugskan_response":"REVIEW","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"high","bugskan_affected_scope":"Vulnerable NeMo, Uni2TS and FlexTok model-loading workflows identified by Unit 42.","bugskan_recommended_next_step":"Update the relevant library and isolate loading of untrusted model artifacts.","bugskan_who_should_check":"","bugskan_material_updated_at":"2026-01-13T00:00:00Z","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[2],"bugskan_technology":[],"class_list":["post-151","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-security-brief"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/151","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=151"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/151\/revisions"}],"predecessor-version":[{"id":358,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/151\/revisions\/358"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=151"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=151"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=151"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=151"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=151"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}