HighVulnerability
CVE-2021-43811: Sockeye unsafe YAML loading of model config files allows code execution
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2021-43811
- Published
- Record updated
- Affected
- sockeye < 2.3.24
- Fixed in
- 2.3.24
- released November 5, 2021, 34 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 2.5%
Summary
CVE-2021-43811 affects Sockeye, the open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch, in versions below 2.3.24. These versions use unsafe YAML loading of model and data configuration files, which can execute arbitrary code embedded in a config file. An attacker must add malicious code to a trained model's config file and convince users to download and run that model, after which the embedded code runs locally.
Mitigation
The issue is fixed in version 2.3.24.
Related items
- MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
- HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSimilar attack · NVD/CVE Database