CVE-2026-31228
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Adversarial Robustness Toolbox (ART) through version 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. The robustness evaluation function for PyTorch models uses the unsafe eval() function to dynamically evaluate user-supplied strings for LossFn and Optimizer parameters without any sanitization. An attacker can exploit this by providing a crafted string containing arbitrary Python code, leading to full system compromise.
Risk Assessment
The risk for the organization includes full system compromise, including data access, AI model modification, and potential lateral movement to other network resources.
Recommendation
Immediately update the ART library to a version newer than 1.20.1 if available, or temporarily disable the Kubeflow component and replace eval() with safer input validation mechanisms.
Original NVD description (English source)
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. The robustness evaluation function for PyTorch models uses the unsafe eval() function to dynamically evaluate user-supplied strings for the LossFn and Optimizer parameters without any sanitization or security restrictions. An attacker can exploit this by providing a specially crafted string that contains arbitrary Python code, which will be executed when eval() is called, leading to complete compromise of the system running the ART evaluation.