
- Palo Alto found critical flaws in AI/ML libraries NeMo, Uni2TS, and FlexTok
- Vulnerabilities allowed arbitrary code execution via malicious model metadata
- All patched by mid-2025; no exploitation observed as of December 2025
Security researchers from Palo Alto Networks have discovered vulnerabilities used in some top Artificial Intelligence (AI) and machine Learning (ML) tools which, if abused, could allow threat actors to execute malicious code on target endpoints, remotely.