faiss
Warn
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The LangChain integration example in
SKILL.mduses theallow_dangerous_deserialization=Trueflag when callingFAISS.load_local. This setting enables the use of Python'spicklemodule to load index data. If an agent or user uses this code to load a FAISS index provided by an untrusted source, it can lead to arbitrary code execution on the host system.
Audit Metadata