# Hugging Face in August 2026: incidents, uptime and changes

> Hugging Face in August 2026: 1 incident on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 5 CVEs. From Rewindex’s archive of Hugging Face’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/hugging-face/2026/08
Last updated: 2026-10-24T16:10:00Z

- Incidents posted: 1 (major/critical: 0) · Maintenance: 1
- By vendor impact label: minor 1
- Uptime (vendor-reported): 100% free of major/critical incidents, 98.63% free of any incident; outage time 0 min, incident time 8 h (partial month)
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 5
- Previous month: [July 2026](https://rewindex.com/company/hugging-face/2026/07.md) · Next: [September 2026](https://rewindex.com/company/hugging-face/2026/09.md) · [All months](https://rewindex.com/company/hugging-face/reports.md) · [Hugging Face](https://rewindex.com/company/hugging-face.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Elevated error rate - AWS CDN (Singapore)](https://rewindex.com/company/hugging-face/incidents/1004901.md) | minor | 2026-08-07 15:14 UTC | 2026-08-07 23:14 UTC | 8.0 h | resolved |

## CVEs published

- [CVE-2026-9856](https://rewindex.com/cve/CVE-2026-9856.md) Path Traversal in huggingface/transformers (CVSS 7.1), published 2026-08-02
- [CVE-2026-71281](https://rewindex.com/cve/CVE-2026-71281.md) peft Unsafe Deserialization via torch.load() Without weights\_only in LoRA-GA and CorDA Modules (CVSS 8.8), published 2026-08-05
- [CVE-2026-69112](https://rewindex.com/cve/CVE-2026-69112.md) Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight\_map (CVSS 7.1), published 2026-08-10
- [CVE-2026-75104](https://rewindex.com/cve/CVE-2026-75104.md) Hugging Face Transformers Path Traversal via Checkpoint Index (CVSS 5.5), published 2026-08-17
- [CVE-2026-15679](https://rewindex.com/cve/CVE-2026-15679.md) Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8), published 2026-08-20

## Maintenance

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Scheduled maintenance: Spaces](https://rewindex.com/company/hugging-face/incidents/1009673.md) | maintenance | 2026-08-17 07:00 UTC | 2026-08-17 09:00 UTC | 2.0 h | resolved |

## Cite this

Hugging Face posted 1 status incident in August 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/hugging-face/2026/08
- Citation: Hugging Face, “Hugging Face in August 2026” (2026-08-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/hugging-face/2026/08 (CC BY 4.0).
- Markdown link: `[Hugging Face: Hugging Face in August 2026 (2026-08-01)](https://rewindex.com/company/hugging-face/2026/08)`


---
Canonical: https://rewindex.com/company/hugging-face/2026/08 · Markdown: https://rewindex.com/company/hugging-face/2026/08.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T14:55:54.439Z