Skip to content
OpenAdvisories

Vendor

huggingface

40 known vulnerabilities.

Products

huggingface/transformers 20 diffusers 4 datasets 3 huggingface/smolagents 2 huggingface/text-generation-inference 2 smolagents 2 transformers 1 peft 1 tokenizers 1 text-generation-inference 1 accelerate 1 LeRobot 1 finetrainers 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-57845 Public exploit

    Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder

    Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pic…

    huggingface datasets
  • High 7.8
    CVE-2026-4372 Public exploit

    Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers

    A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious `config.json` file containing the `_attn_implementation_internal` f…

    huggingface huggingface/transformers transformers PyPI
  • Medium 5.4
    CVE-2025-11844 Public exploit

    XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function

    Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs an XPath query by directly concatenating user-supplied input into the …

    huggingface huggingface/smolagents smolagents PyPI
  • Low 3.4
    CVE-2024-3568 Public exploit

    Arbitrary Code Execution via Deserialization in huggingface/transformers

    The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by craf…

    huggingface huggingface/transformers transformers PyPI