Huggingface vulnerabilities
40 CVEs and advisories name Huggingface as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-124588huggingface finetrainers Model Index model.py resolve_component_cls code injection
- CVE-2026-57845Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder
- CVE-2026-85670tokenizers BpeBuilder Buffer Overflow via merge token
- CVE-2026-75104Hugging Face Transformers Path Traversal via Checkpoint Index
- CVE-2026-69112Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map
- CVE-2026-71281peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules
- CVE-2026-9856Path Traversal in huggingface/transformers
- CVE-2026-66007Datasets Path Traversal via Unsanitized file_name Metadata
- CVE-2026-65010Datasets Symlink-following Arbitrary File Write via Extractor.extract()
- CVE-2026-65920Diffusers Path Traversal via weight_map Arbitrary File Read
- CVE-2026-63086text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions
- CVE-2026-45804Diffusers: TOCTOU Trust Remote Code Bypass
- CVE-2026-5241Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers
- CVE-2026-4372Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers
- CVE-2026-44827Diffusers: None.py Trust Remote Code Bypass
- CVE-2026-44513Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components
- CVE-2026-1839Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers
- CVE-2026-4963huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection
- CVE-2026-2654huggingface smolagents LocalPythonExecutor requests.post server-side request forgery
- CVE-2026-0599Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference
- CVE-2025-11844XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function
- CVE-2025-6921Regular Expression Denial of Service (ReDoS) in huggingface/transformers
- CVE-2025-10772huggingface LeRobot ZeroMQ Socket lekiwi_remote.py missing authentication
- CVE-2025-6051Regular Expression Denial of Service (ReDoS) in huggingface/transformers
- CVE-2025-6638Regular Expression Denial of Service (ReDoS) in huggingface/transformers
- CVE-2025-5197Regular Expression Denial of Service (ReDoS) in huggingface/transformers
- CVE-2025-5120Sandbox Escape Vulnerability in huggingface/smolagents
- CVE-2025-3933Regular Expression Denial of Service (ReDoS) in huggingface/transformers
- CVE-2025-3777Improper Input Validation in huggingface/transformers
- CVE-2025-3264Regular Expression Denial of Service (ReDoS) in huggingface/transformers