CVE-2026-31230
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
The Adversarial Robustness Toolbox (ART) up to version 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py). The script uses the unsafe eval() function to parse string values from --clip_values and --input_shape arguments, allowing an attacker to inject arbitrary Python code.
Risk Assessment
An attacker can remotely execute arbitrary code on the system running the ART evaluation, leading to full system compromise, data theft, or lateral movement within the network.
Recommendation
Immediately update ART to a version newer than 1.20.1; in the meantime, avoid passing untrusted data to --clip_values and --input_shape arguments and consider using safer parsing methods instead of eval().
Original NVD description (English source)
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py). The script uses the unsafe eval() function to parse string values provided via the --clip_values and --input_shape command-line arguments. This allows an attacker to inject arbitrary Python code into these arguments, which will be executed when eval() is called. The vulnerability can be exploited remotely if an attacker can control these arguments (e.g., through pipeline configuration or automated scripts), leading to arbitrary code execution on the system running the ART evaluation.