# cve.now: Huggingface

The newest entries naming Huggingface as an affected vendor (up to 200), of 40 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-124588](https://cve.now/CVE-2026-124588.md): huggingface finetrainers Model Index model.py resolve\_component\_cls code injection (CVSS 5.3)
- [CVE-2026-57845](https://cve.now/CVE-2026-57845.md): Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder (CVSS 8.7)
- [CVE-2026-85670](https://cve.now/CVE-2026-85670.md): tokenizers BpeBuilder Buffer Overflow via merge token (CVSS 7.1)
- [CVE-2026-75104](https://cve.now/CVE-2026-75104.md): Hugging Face Transformers Path Traversal via Checkpoint Index (CVSS 6.8)
- [CVE-2026-69112](https://cve.now/CVE-2026-69112.md): Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight\_map (CVSS 6.9)
- [CVE-2026-71281](https://cve.now/CVE-2026-71281.md): peft Unsafe Deserialization via torch.load() Without weights\_only in LoRA-GA and CorDA Modules (CVSS 8.8)
- [CVE-2026-9856](https://cve.now/CVE-2026-9856.md): Path Traversal in huggingface/transformers (CVSS 7.1)
- [CVE-2026-66007](https://cve.now/CVE-2026-66007.md): Datasets Path Traversal via Unsanitized file\_name Metadata (CVSS 6.9)
- [CVE-2026-65010](https://cve.now/CVE-2026-65010.md): Datasets Symlink-following Arbitrary File Write via Extractor.extract() (CVSS 4.4)
- [CVE-2026-65920](https://cve.now/CVE-2026-65920.md): Diffusers Path Traversal via weight\_map Arbitrary File Read (CVSS 5.3)
- [CVE-2026-63086](https://cve.now/CVE-2026-63086.md): text-generation-inference 3.3.7 SSRF via fetch\_image in multimodal chat completions (CVSS 6.9)
- [CVE-2026-45804](https://cve.now/CVE-2026-45804.md): Diffusers: TOCTOU Trust Remote Code Bypass (CVSS 7.5)
- [CVE-2026-5241](https://cve.now/CVE-2026-5241.md): Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers (CVSS 8.0)
- [CVE-2026-4372](https://cve.now/CVE-2026-4372.md): Arbitrary Remote Code Execution via \`\_attn\_implementation\_internal\` Config Injection in huggingface/transformers (CVSS 7.8)
- [CVE-2026-44827](https://cve.now/CVE-2026-44827.md): Diffusers: None.py Trust Remote Code Bypass (CVSS 8.8)
- [CVE-2026-44513](https://cve.now/CVE-2026-44513.md): Diffusers: \`trust\_remote\_code\` bypass via \`custom\_pipeline\` and local custom components (CVSS 8.8)
- [CVE-2026-1839](https://cve.now/CVE-2026-1839.md): Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers (CVSS 6.5)
- [CVE-2026-4963](https://cve.now/CVE-2026-4963.md): huggingface smolagents Incomplete Fix CVE-2025-9959 local\_python\_executor.py evaluate\_with code injection (CVSS 5.3)
- [CVE-2026-2654](https://cve.now/CVE-2026-2654.md): huggingface smolagents LocalPythonExecutor requests.post server-side request forgery (CVSS 5.3)
- [CVE-2026-0599](https://cve.now/CVE-2026-0599.md): Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference (CVSS 7.5)
- [CVE-2025-11844](https://cve.now/CVE-2025-11844.md): XPath Injection in Hugging Face Smolagents search\_item\_ctrl\_f Function (CVSS 5.4)
- [CVE-2025-6921](https://cve.now/CVE-2025-6921.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3)
- [CVE-2025-10772](https://cve.now/CVE-2025-10772.md): huggingface LeRobot ZeroMQ Socket lekiwi\_remote.py missing authentication (CVSS 5.3)
- [CVE-2025-6051](https://cve.now/CVE-2025-6051.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3)
- [CVE-2025-6638](https://cve.now/CVE-2025-6638.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3)
- [CVE-2025-5197](https://cve.now/CVE-2025-5197.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3)
- [CVE-2025-5120](https://cve.now/CVE-2025-5120.md): Sandbox Escape Vulnerability in huggingface/smolagents (CVSS 7.6)
- [CVE-2025-3933](https://cve.now/CVE-2025-3933.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3)
- [CVE-2025-3777](https://cve.now/CVE-2025-3777.md): Improper Input Validation in huggingface/transformers (CVSS 3.5)
- [CVE-2025-3264](https://cve.now/CVE-2025-3264.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3)
- [CVE-2025-3263](https://cve.now/CVE-2025-3263.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3)
- [CVE-2025-3262](https://cve.now/CVE-2025-3262.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3)
- [CVE-2025-2099](https://cve.now/CVE-2025-2099.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3)
- [CVE-2025-1194](https://cve.now/CVE-2025-1194.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 4.3)
- [CVE-2024-12720](https://cve.now/CVE-2024-12720.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3)
- [CVE-2024-3924](https://cve.now/CVE-2024-3924.md): Code Injection in huggingface/text-generation-inference (CVSS 4.4)
- [CVE-2024-3568](https://cve.now/CVE-2024-3568.md): Arbitrary Code Execution via Deserialization in huggingface/transformers (CVSS 3.4)
- [CVE-2023-7018](https://cve.now/CVE-2023-7018.md): Deserialization of Untrusted Data in huggingface/transformers (CVSS 9.6)
- [CVE-2023-6730](https://cve.now/CVE-2023-6730.md): Deserialization of Untrusted Data in huggingface/transformers (CVSS 9.0)
- [CVE-2023-2800](https://cve.now/CVE-2023-2800.md): Insecure Temporary File in huggingface/transformers (CVSS 4.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/huggingface
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.