{"data":{"id":"8017f37f-cbb0-43e8-96ac-c3d3c9bc575c","title":"CVE-2026-31230: The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its…","summary":"The Adversarial Robustness Toolbox (ART) through 1.20.1 has a command-line argument injection flaw in its Kubeflow component, robustness_evaluation_fgsm_pytorch.py. The script passes the --clip_values and --input_shape arguments to the unsafe eval() function, so injected Python code runs when eval() is called. An attacker who can control these arguments, for example through pipeline configuration or automated scripts, can achieve arbitrary code execution on the system running the ART evaluation.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-31230","publishedAt":"2026-05-12T18:16:51.277Z","cveId":"CVE-2026-31230","cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Adversarial Robustness Toolbox (ART)","Kubeflow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Adversarial Robustness Toolbox code injection via command-line arguments","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00554,"epssCheckedAt":"2026-11-07T06:14:03.562Z","kevDateAdded":null,"advisoryAliases":["GHSA-24f5-hrhx-3grp"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T06:12:01.157Z","patchAvailable":null,"disclosureDate":"2026-05-12T18:16:51.277Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","availability","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}