huggingface vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-57845 Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a maliHigh 8.7 · Oct 23, 2026
• CVE-2026-85670 tokenizers (Hugging Face) is affected by an out-of-bounds buffer access in BpeBuilder::build (tokenizers/src/models/bpe/model.rs).High 7.1 · Sep 4, 2026
• CVE-2026-71281 Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) cHigh 8.8 · Aug 5, 2026
• CVE-2026-9856 A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal.High 7.1 · Aug 2, 2026
• CVE-2026-45804 Diffusers is the a library for pretrained diffusion models.High 7.5 · Jul 15, 2026
• CVE-2026-5241 A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrarCritical 9.6 · Jun 3, 2026
• CVE-2026-4372 A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0.High 7.8 · May 24, 2026
• CVE-2026-44827 Diffusers is the a library for pretrained diffusion models.High 8.8 · May 14, 2026
• CVE-2026-44513 Diffusers is the a library for pretrained diffusion models.High 8.8 · May 14, 2026
• CVE-2026-1839 A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution.High 7.8 · Apr 7, 2026
• CVE-2026-0599 A vulnerability in huggingface/text-generation-inference version 3.3.6 allows unauthenticated remote attackers to exploit unbounded external image fetching duriHigh 7.5 · Feb 2, 2026
• CVE-2025-6921 The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer.High 7.5 · Sep 23, 2025
• CVE-2025-6638 A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizerHigh 7.5 · Sep 12, 2025
• CVE-2025-5120 A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and acCritical 10 · Jul 27, 2025
• CVE-2025-3262 A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0.High 7.5 · Jul 7, 2025
• CVE-2025-2099 A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a RegulaHigh 7.5 · May 19, 2025
• CVE-2024-12720 A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization_nougaHigh 7.5 · Mar 20, 2025
• CVE-2024-3568 The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` funCritical 9.6 · Apr 10, 2024
• CVE-2023-7018 Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.High 7.8 · Dec 20, 2023
• CVE-2023-6730 Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.High 8.8 · Dec 19, 2023