CVE-2026-31230: Adversarial Robustness Toolbox code injection via command-line arguments

Summary

The Adversarial Robustness Toolbox (ART) through 1.20.1 has a command-line argument injection flaw in its Kubeflow component, robustness_evaluation_fgsm_pytorch.py. The script passes the --clip_values and --input_shape arguments to the unsafe eval() function, so injected Python code runs when eval() is called. An attacker who can control these arguments, for example through pipeline configuration or automated scripts, can achieve arbitrary code execution on the system running the ART evaluation.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Adversarial machine learning

Related items

• MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database
• CriticalCVE-2026-58490: Tracecat SAML authentication bypass through unsigned responses in Docker ComposeSimilar attack · NVD/CVE Database
• MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
• HighCVE-2026-123974: TorchServe local privilege escalation via predictable /tmp extraction directorySimilar attack · NVD/CVE Database
• InfoOpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the LineSimilar attack · SecurityWeek