Skip to content
OpenAdvisories

Vendor

Hugging Face

60 known vulnerabilities.

Products

huggingface/transformers 20 transformers 13 diffusers 5 datasets 3 smolagents 3 LeRobot 3 huggingface/smolagents 2 huggingface/text-generation-inference 2 accelerate 2 Text Embeddings Inference 1 sentence-transformers 1 peft 1 PyTorch Image Models 1 tokenizers 1 text-generation-inference 1 finetrainers 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-68770

    sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False

    sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the import_module_class helper within sentence_transformers/util/misc.py, where the guard condition …

    Hugging Face sentence-transformers open-webui sentence-transformers Wolfi PyPI
  • Critical 9.3
    CVE-2026-25874 EPSS 16%

    LeRobot Unsafe Deserialization Remote Code Execution via gRPC

    LeRobot through 0.6.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. A…

    Hugging Face LeRobot
  • Critical 10.0
    CVE-2025-14931

    Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is …

    Hugging Face smolagents smolagents PyPI
  • Critical 9.6
    CVE-2023-7018

    Deserialization of Untrusted Data in huggingface/transformers

    Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

    Hugging Face huggingface/transformers transformers PyPI
  • Critical 9.0
    CVE-2023-6730

    Deserialization of Untrusted Data in huggingface/transformers

    Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.

    Hugging Face huggingface/transformers transformers PyPI