CVE-2021-24040
CVSS v3
9.8
CRITICAL
EPSS Score
17.4 %
exploit probability, as of 2026-10-05
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.
Technical details
- Published
- 2021-09-10
- Exploit-DB
- EDB-50289
Frequently asked questions
What is CVE-2021-24040?
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.
Is CVE-2021-24040 actively exploited?
Active exploitation of CVE-2021-24040 has not been confirmed. Its EPSS score was 17.4% on 2026-10-05, the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2021-24040?
CVE-2021-24040 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2021-24040 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 50 free checks/month · Free API key
Other 2021 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).