# CVE-2026-31230: Trusted-AI Adversarial Robustness Toolbox code injection in Kubeflow component

Source: https://junglewise.ai/threats/cve-2026-31230-trusted-ai-adversarial-robustness-toolbox-code-injection-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-12. Updated: 2026-06-30  
License: CC BY 4.0 with a link back

CVE-2026-31230 · Severity: critical · CVSS 9.8 · Published 2026-05-12

The Adversarial Robustness Toolbox (ART) is a Python library used by developers and data scientists to evaluate the security of machine learning models. A vulnerability in its Kubeflow component allows an attacker to execute malicious commands on the system running the evaluation. This could lead to a complete takeover of the machine, theft of sensitive AI models, or unauthorized access to corporate data.

Technologies: [Trusted-AI Adversarial Robustness Toolbox](https://junglewise.ai/threats/technologies/adversarial-robustness-toolbox). Vendors: [Trusted-AI](https://junglewise.ai/threats/vendors/trusted-ai).

## Quick answers

**Is CVE-2026-31230 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-31230 being exploited in the wild.

**How severe is CVE-2026-31230?** Critical severity, with a CVSS score of 9.8, published 12 May 2026.

**Which products and versions are affected?** Trusted-AI Adversarial Robustness Toolbox thru 1.20.1.

**Is there a fix for CVE-2026-31230?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-31230 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-31230?** Check whether you run Trusted-AI Adversarial Robustness Toolbox at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command-line argument injection vulnerability exists in the Adversarial Robustness Toolbox (ART) through version 1.20.1 within the robustness_evaluation_fgsm_pytorch.py script of its Kubeflow component. The root cause is the unsafe use of the Python eval() function to parse string values provided via the --clip_values and --input_shape command-line arguments. An attacker who can control these arguments—for example, through a compromised pipeline configuration or automated script—can inject and execute arbitrary Python code. This can be exploited remotely without authentication, leading to full system compromise. Red Hat has also identified this as affecting OpenShift AI (RHOAI).

## Affected products

- Trusted-AI Adversarial Robustness Toolbox (ART) thru 1.20.1
- Red Hat OpenShift AI (RHOAI)

## Timeline

- 2026-05-12: disclosed
- 2026-05-12: advisory

## References

- [https://github.com/Trusted-AI/adversarial-robustness-toolbox](https://github.com/Trusted-AI/adversarial-robustness-toolbox)
- [https://www.notion.so/CVE-2026-31230-35d1e13931888126b624d12769c0e040](https://www.notion.so/CVE-2026-31230-35d1e13931888126b624d12769c0e040)
- [https://access.redhat.com/security/cve/CVE-2026-31230](https://access.redhat.com/security/cve/CVE-2026-31230)
- [https://bugzilla.redhat.com/show_bug.cgi?id=2476634](https://bugzilla.redhat.com/show_bug.cgi?id=2476634)
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31230.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31230.json)

## Related threats

- [Trusted-AI Adversarial Robustness Toolbox insecure deserialization in Kubeflow](https://junglewise.ai/threats/cve-2026-31229-trusted-ai-adversarial-robustness-toolbox-insecure)
- [Trusted-AI Adversarial Robustness Toolbox RCE in Kubeflow component](https://junglewise.ai/threats/cve-2026-31228-trusted-ai-adversarial-robustness-toolbox-rce-in-kubeflow)