huggingface transformers vulnerabilities

Latest huggingface transformers CVEs

Newest publication first · page 1 of 2

1. CVE-2026-5241 Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

   Published 2026-06-03

   Critical·CVSS 9.6 EPSS 0.60%

   A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the trust_remote_code parameter, intended to prevent remote...

2. CVE-2026-4372 Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers

   Published 2026-05-24

   High·CVSS 7.8 EPSS 0.70%

   A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious config.json file containing the _attn_implementation_internal field set to an attacker-c...

3. CVE-2026-1839 Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers

   Published 2026-04-07

   High·CVSS 7.8 EPSS 0.39%

   A vulnerability in the HuggingFace Transformers library, specifically in the Trainer class, allows for arbitrary code execution. The _load_rng_state() method in src/transformers/trainer.py at line 3059 calls torch.load() without the weights_only=True parameter. This issue affects...

4. CVE-2025-14930 Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

   Published 2025-12-23

   High·CVSS 7.8 EPSS 0.33%

   Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerab...

5. CVE-2025-14928 Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability

   Published 2025-12-23

   High·CVSS 7.8 EPSS 0.34%

   Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerabil...

6. CVE-2025-14924 Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

   Published 2025-12-23

   High·CVSS 7.8 EPSS 0.33%

   Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this...

7. CVE-2025-14920 Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

   Published 2025-12-23

   High·CVSS 7.8 EPSS 0.36%

   Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit th...

8. CVE-2025-14926 Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability

   Published 2025-12-23

   High·CVSS 7.8 EPSS 0.34%

   Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability...

9. CVE-2025-14927 Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability

   Published 2025-12-23

   High·CVSS 7.8 EPSS 0.34%

   Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerabili...

10. CVE-2025-14921 Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Published 2025-12-23

    High·CVSS 7.8 EPSS 0.33%

    Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to explo...

11. CVE-2025-14929 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Published 2025-12-23

    High·CVSS 7.8 EPSS 0.37%

    Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required...

12. CVE-2025-6921 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-09-23

    High·CVSS 7.5 EPSS 0.51%

    The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer. The vulnerability arises from the _do_use_weight_decay method, which processes user-controlled regular expressions in th...

13. CVE-2025-6051 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-09-14

    Medium·CVSS 5.3 EPSS 0.38%

    A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the normalize_numbers() method of the EnglishNormalizer class. This vulnerability affects versions up to 4.52.4 and is fixed in version 4.53.0...

14. CVE-2025-6638 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-09-12

    High·CVSS 7.5 EPSS 0.56%

    A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizer's remove_language_code() method. This vulnerability is present in version 4.52.4 and has been fixed in version 4.53.0....

15. CVE-2025-5197 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-08-06

    Medium·CVSS 5.3 EPSS 0.45%

    A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the convert_tf_weight_name_to_pt_weight_name() function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex...

16. CVE-2025-3933 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-07-11

    Medium·CVSS 5.3 EPSS 0.50%

    A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json() method. This vulnerability affects versions 4.50.3 and earlier, and is fixed in version 4.52.1. The is...

17. CVE-2025-3777 Improper Input Validation in huggingface/transformers

    Published 2025-07-07

    Low·CVSS 3.5 EPSS 0.42%

    Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the image_utils.py file. The vulnerability arises from insecure URL validation using the startswith() method, which can be bypassed through URL username injection. This a...

18. CVE-2025-3264 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-07-07

    Medium·CVSS 5.3 EPSS 0.50%

    A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the get_imports() function within dynamic_module_utils.py. This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue ar...

19. CVE-2025-3263 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-07-07

    Medium·CVSS 5.3 EPSS 0.50%

    A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the get_configuration_file() function within the transformers.configuration_utils module. The affected version is 4.49.0, and the issue is resolve...

20. CVE-2025-3262 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-07-07

    High·CVSS 7.5 EPSS 0.49%

    A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression complexity in the SETTING_RE variable within the transformers/command...

21. CVE-2025-2099 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-05-19

    High·CVSS 7.5 EPSS 0.60%

    A vulnerability in the preprocess_string() function of the transformers.testing_utils module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The regular expression used to process code blocks in docstrings contains nes...

22. CVE-2025-1194 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-04-29

    Medium·CVSS 6.5 EPSS 0.49%

    A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_gpt_neox_japanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where re...

23. CVE-2024-12720 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

    Published 2025-03-20

    High·CVSS 7.5 EPSS 0.75%

    A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_nougat_fast.py. The vulnerability occurs in the post_process_single() function, where a regular expression processes speciall...

24. CVE-2024-11394 Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Published 2024-11-22

    High·CVSS 8.8 EPSS 2.7%

    Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vu...

25. CVE-2024-11393 Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Published 2024-11-22

    High·CVSS 8.8 EPSS 3.3%

    Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.