Is CVE-2026-31228 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-31228 being exploited in the wild.

How severe is CVE-2026-31228?

Critical severity, with a CVSS score of 9.8, published 12 May 2026.

Which products and versions are affected?

Trusted-AI Adversarial Robustness Toolbox thru 1.20.1.

Is there a fix for CVE-2026-31228?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-31228 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-31228?

Check whether you run Trusted-AI Adversarial Robustness Toolbox at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-31228: Trusted-AI Adversarial Robustness Toolbox RCE in Kubeflow component

CVE-2026-31228 · Severity: critical · CVSS 9.8 · Published 2026-05-12

The Adversarial Robustness Toolbox (ART), a library used by developers and researchers to evaluate the security of machine learning models, contains a critical flaw in its Kubeflow component. An attacker can exploit this vulnerability to execute malicious code on the system running the evaluation. This could lead to a complete takeover of the server, potentially exposing sensitive AI models, training data, or corporate infrastructure.

Technologies: Trusted-AI Adversarial Robustness Toolbox. Vendors: Trusted-AI.

Quick answers

Is CVE-2026-31228 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-31228 being exploited in the wild.
How severe is CVE-2026-31228?: Critical severity, with a CVSS score of 9.8, published 12 May 2026.
Which products and versions are affected?: Trusted-AI Adversarial Robustness Toolbox thru 1.20.1.
Is there a fix for CVE-2026-31228?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-31228 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-31228?: Check whether you run Trusted-AI Adversarial Robustness Toolbox at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A code injection vulnerability (CWE-94) exists in the Adversarial Robustness Toolbox (ART) through version 1.20.1. The robustness evaluation function for PyTorch models within the Kubeflow component utilizes the unsafe Python eval() function to process user-supplied strings for 'LossFn' and 'Optimizer' parameters. Because these strings are not sanitized or restricted, a remote attacker can provide a specially crafted payload containing arbitrary Python code. Successful exploitation results in the execution of that code with the privileges of the ART process, leading to full system compromise. Red Hat has also identified this vulnerability as affecting Red Hat OpenShift AI (RHOAI).

Affected products

Trusted-AI Adversarial Robustness Toolbox (ART) thru 1.20.1
Red Hat Red Hat OpenShift AI (RHOAI)

Timeline

2026-05-12: disclosed
2026-05-12: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.