Palo Alto found critical flaws in AI/ML libraries NeMo, Uni2TS, and FlexTok Vulnerabilities allowed arbitrary code execution via malicious model metadata All patched by mid-2025; no exploitation ...
The discoverers have named the root vulnerability "Copy Fail". All major distributions since 2017 are affected.