--- title: Copy-paste vulnerability hits AI inference frameworks at... description: Critical remote code execution vulnerabilities were discovered across major AI inference frameworks including Meta's Llama Stack, Nvidia TensorRT-LLM, vLLM,... canonical: https://daily.dev/posts/copy-paste-vulnerability-hits-ai-inference-frameworks-at-meta-nvidia-and-microsoft-mt9nytbva twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Copy-paste vulnerability hits AI inference frameworks at Meta, Nvidia, and Microsoft | daily.dev og:description: Critical remote code execution vulnerabilities were discovered across major AI inference frameworks including Meta's Llama Stack, Nvidia TensorRT-LLM, vLLM,... og:url: https://daily.dev/posts/copy-paste-vulnerability-hits-ai-inference-frameworks-at-meta-nvidia-and-microsoft-mt9nytbva og:image: https://api.daily.dev/og/posts/mt9NYtbVA.png og:image:alt: Copy-paste vulnerability hits AI inference frameworks at Meta, Nvidia, and Microsoft og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Copy-paste vulnerability hits AI inference frameworks at Meta, Nvidia, and Microsoft **[InfoWorld](https://daily.dev/sources/infoworld)** · 3 min read · 0 upvotes · 0 comments ## Summary Critical remote code execution vulnerabilities were discovered across major AI inference frameworks including Meta's Llama Stack, Nvidia TensorRT-LLM, vLLM, and SGLang. The flaws originated from unsafe use of ZeroMQ and Python's pickle deserialization in Meta's code, then spread to other projects through copy-paste development practices. Attackers could exploit these vulnerabilities to execute arbitrary code on GPU clusters, exfiltrate data, or compromise AI infrastructure. All affected vendors have released patches, and organizations are advised to upgrade immediately and implement authentication measures for ZeroMQ communications. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Python libraries in AI/ML models can be poisoned w metadata](https://daily.dev/posts/python-libraries-in-ai-ml-models-can-be-poisoned-w-metadata-4tbuftlcz) · The Register · 0 upvotes · 0 comments - [Remote Code Execution With Modern AI/ML Formats and Libraries](https://daily.dev/posts/remote-code-execution-with-modern-ai-ml-formats-and-libraries-kzzcz2ymw) · Unit 42 · 0 upvotes · 0 comments - [Critical Flaw in Langflow AI Platform Under Attack](https://daily.dev/posts/critical-flaw-in-langflow-ai-platform-under-attack-fz5dbqsfo) · Dark Reading · 0 upvotes · 0 comments - [Ollama vulnerability highlights danger of AI frameworks with unrestricted access](https://daily.dev/posts/ollama-vulnerability-highlights-danger-of-ai-frameworks-with-unrestricted-access-qmh34jpqx) · CSO Online · 3 upvotes · 0 comments --- Tags: [#ai](https://daily.dev/tags/ai), [#security](https://daily.dev/tags/security), [#python](https://daily.dev/tags/python), [#nvidia](https://daily.dev/tags/nvidia) [View this post on daily.dev](https://daily.dev/posts/copy-paste-vulnerability-hits-ai-inference-frameworks-at-meta-nvidia-and-microsoft-mt9nytbva) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Copy-paste vulnerability hits AI inference frameworks at Meta, Nvidia, and Microsoft","url":"https://daily.dev/posts/copy-paste-vulnerability-hits-ai-inference-frameworks-at-meta-nvidia-and-microsoft-mt9nytbva","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/copy-paste-vulnerability-hits-ai-inference-frameworks-at-meta-nvidia-and-microsoft-mt9nytbva"},"datePublished":"2025-11-14T12:16:42.721Z","dateModified":"2026-08-24T06:48:07.404Z","description":"Critical remote code execution vulnerabilities were discovered across major AI inference frameworks including Meta's Llama Stack, Nvidia TensorRT-LLM, vLLM,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bc1f045ca7a47c66d5ef1280b8c3e853?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bc1f045ca7a47c66d5ef1280b8c3e853?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"InfoWorld","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"InfoWorld","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/bf6d68a999064029b0bb09aa6268f1f3","url":"https://daily.dev/sources/infoworld"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/copy-paste-vulnerability-hits-ai-inference-frameworks-at-meta-nvidia-and-microsoft-mt9nytbva","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai,security,python,nvidia","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"InfoWorld","item":"https://daily.dev/sources/infoworld"},{"@type":"ListItem","position":3,"name":"Copy-paste vulnerability hits AI inference frameworks at Meta, Nvidia, and Microsoft"}]} ```