huggingface vulnerabilities

Products

• transformers 30
• huggingface/transformers 20
• smolagents 4
• diffusers 3
• huggingface/datasets 2
• huggingface/smolagents 2
• huggingface/text-generation-inference 2
• LeRobot 2
• finetrainers 1
• peft 1
• text generation inference 1
• text-generation-inference 1

Latest huggingface CVEs

Newest publication first · page 1 of 2

1. CVE-2026-124588 huggingface finetrainers Model Index model.py resolve_component_cls code injection

   Published 2026-11-09

   Medium·CVSS 5.3 EPSS 0.32%

   A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. The impacted element is the function resolve_component_cls of the file finetrainers/utils/model.py of the component Model Index Handler. Performing a manipulation of the argument Library results in code...

2. CVE-2026-57845 Hugging Face Datasets < 5.2.0 Pickle Deserialization RCE via Pandas Builder

   Published 2026-10-23

   High·CVSS 8.7 EPSS 0.55%

   Hugging Face Datasets before 5.2.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset tha...

3. CVE-2026-71281 peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules

   Published 2026-08-05

   High·CVSS 8.8 EPSS 0.50%

   Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch.load on config-specified cache/covariance files without weights_only=True, bypassing peft's own safe-loading w...

4. CVE-2026-9856 Path Traversal in huggingface/transformers

   Published 2026-08-02

   High·CVSS 7.1 EPSS 0.46%

   A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the save_pretrained() methods of PreTrainedTokenizerBase and ProcessorMixin, where keys from the chat_template dictionary...

5. CVE-2026-66007 Datasets Path Traversal via Unsanitized file_name Metadata

   Published 2026-07-24

   Medium·CVSS 6.9 EPSS 0.55%

   Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted file_name values with...

6. CVE-2026-63086 text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions

   Published 2026-07-16

   Medium·CVSS 6.9 EPSS 0.43%

   text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compatible multimodal chat completions endpoint that allows unauthenticated network attackers to coerce the server into issuing arbitrary HTTP GET requests by supplyi...

7. CVE-2026-45804 Diffusers: TOCTOU Trust Remote Code Bypass

   Published 2026-07-15

   High·CVSS 7.5 EPSS 0.37%

   Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretrained flow can bypass the trust_remote_code guard because download() validates model_index.json and custom pipeline code before later loading from a cached folder t...

8. CVE-2026-5241 Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

   Published 2026-06-03

   Critical·CVSS 9.6 EPSS 0.60%

   A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the trust_remote_code parameter, intended to prevent remote...

9. CVE-2026-4372 Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers

   Published 2026-05-24

   High·CVSS 7.8 EPSS 0.70%

   A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious config.json file containing the _attn_implementation_internal field set to an attacker-c...

10. CVE-2026-44827 Diffusers: None.py Trust Remote Code Bypass

    Published 2026-05-14

    High·CVSS 8.8 EPSS 0.72%

    Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, diffusers 0.37.0 allows remote code execution without the trust_remote_code=True safeguard when loading pipelines from Hugging Face Hub repositories. The _resolve_custom_pipeline_and_cls function in pipe...

11. CVE-2026-44513 Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components

    Published 2026-05-14

    High·CVSS 8.8 EPSS 1.1%

    Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, a trust_remote_code bypass in DiffusionPipeline.from_pretrained allows arbitrary remote code execution despite the user passing trust_remote_code=False (or omitting it, which is the default). The vulnera...

12. CVE-2026-25874 LeRobot Unsafe Deserialization Remote Code Execution via gRPC

    Published 2026-04-23

    Critical·CVSS 9.3 EPSS 15.5%

    LeRobot through 0.6.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated net...

13. CVE-2026-1839 Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers

    Published 2026-04-07

    High·CVSS 7.8 EPSS 0.39%

    A vulnerability in the HuggingFace Transformers library, specifically in the Trainer class, allows for arbitrary code execution. The _load_rng_state() method in src/transformers/trainer.py at line 3059 calls torch.load() without the weights_only=True parameter. This issue affects...

14. CVE-2026-4963 huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection

    Published 2026-03-27

    Medium·CVSS 5.3 EPSS 0.59%

    A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_with of the file src/smolagents/local_python_executor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injectio...

15. CVE-2026-2654 huggingface smolagents LocalPythonExecutor requests.post server-side request forgery

    Published 2026-02-18

    Medium·CVSS 5.3 EPSS 0.43%

    A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit h...

16. CVE-2026-0599 Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference

    Published 2026-02-02

    High·CVSS 7.5 EPSS 29.5%

    A vulnerability in huggingface/text-generation-inference version 3.3.6 allows unauthenticated remote attackers to exploit unbounded external image fetching during input validation in VLM mode. The issue arises when the router scans inputs for Markdown image links and performs a b...

17. CVE-2025-14930 Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Published 2025-12-23

    High·CVSS 7.8 EPSS 0.33%

    Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerab...

18. CVE-2025-14928 Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability

    Published 2025-12-23

    High·CVSS 7.8 EPSS 0.34%

    Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerabil...

19. CVE-2025-14924 Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Published 2025-12-23

    High·CVSS 7.8 EPSS 0.33%

    Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this...

20. CVE-2025-14920 Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Published 2025-12-23

    High·CVSS 7.8 EPSS 0.36%

    Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit th...

21. CVE-2025-14926 Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability

    Published 2025-12-23

    High·CVSS 7.8 EPSS 0.34%

    Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability...

22. CVE-2025-14927 Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability

    Published 2025-12-23

    High·CVSS 7.8 EPSS 0.34%

    Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerabili...

23. CVE-2025-14921 Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Published 2025-12-23

    High·CVSS 7.8 EPSS 0.33%

    Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to explo...

24. CVE-2025-14929 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Published 2025-12-23

    High·CVSS 7.8 EPSS 0.37%

    Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required...

25. CVE-2025-11844 XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function

    Published 2025-10-22

    Medium·CVSS 5.4 EPSS 0.28%

    Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression with...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.