Companies/Hugging Face/CVEs

Hugging Face CVEs

53 vulnerabilities mapped to Hugging Face’s software or packages, 0 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.

CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.

• 2026-10-23

  CVE-2026-57845 Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas Builder

  CVSS 8.8 highEPSS 0.55%

• 2026-10-11

  CVE-2026-108857 Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging

  CVSS 3.3 lowEPSS 0.11%

• 2026-09-04

  CVE-2026-85670 tokenizers BpeBuilder Buffer Overflow via merge token

  CVSS 6.5 mediumEPSS 0.47%

• 2026-09-01

  CVE-2026-80047 Hugging Face Transformers library writes remote code to disk prior to consent check

  CVSS 7.8 highEPSS 0.10%

• 2026-08-20

  CVE-2026-15679 Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.45%

• 2026-08-17

  CVE-2026-75104 Hugging Face Transformers Path Traversal via Checkpoint Index

  CVSS 5.5 mediumEPSS 0.29%

• 2026-08-10

  CVE-2026-69112 Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map

  CVSS 7.1 highEPSS 0.19%

• 2026-08-05

  CVE-2026-71281 peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules

  CVSS 8.8 highEPSS 0.50%

• 2026-08-02

  CVE-2026-9856 Path Traversal in huggingface/transformers

  CVSS 7.1 highEPSS 0.46%

• 2026-07-31

  CVE-2026-68770 sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False

  CVSS 9.8 criticalEPSS 0.91%

• 2026-07-24

  CVE-2026-66007 Datasets Path Traversal via Unsanitized file_name Metadata

  CVSS 6.5 mediumEPSS 0.55%

• 2026-07-23

  CVE-2026-65010 Datasets Symlink-following Arbitrary File Write via Extractor.extract()

  CVSS 6.6 mediumEPSS 0.17%

• 2026-07-23

  CVE-2026-65920 Diffusers Path Traversal via weight_map Arbitrary File Read

  CVSS 4.3 mediumEPSS 0.40%

• 2026-07-16

  CVE-2026-63086 text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions

  CVSS 8.6 highEPSS 0.43%

• 2026-07-15

  CVE-2026-45804 Diffusers: TOCTOU Trust Remote Code Bypass

  CVSS 7.5 highEPSS 0.37%

• 2026-06-03

  CVE-2026-5241 Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

  CVSS 8.0 highEPSS 0.60%

• 2026-05-24

  CVE-2026-4372 Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers

  CVSS 7.8 highEPSS 0.70%

• 2026-05-14

  CVE-2026-44827 Diffusers: None.py Trust Remote Code Bypass

  CVSS 8.8 highEPSS 0.72%

• 2026-05-14

  CVE-2026-44513 Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components

  CVSS 8.8 highEPSS 1.1%

• 2026-04-23

  CVE-2026-25874 LeRobot Unsafe Deserialization Remote Code Execution via gRPC

  CVSS 9.8 criticalEPSS 15.5%

• 2026-04-07

  CVE-2026-1839 Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers

  CVSS 6.5 mediumEPSS 0.38%

• 2026-03-27

  CVE-2026-4963 huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection

  CVSS 6.3 mediumEPSS 0.59%

• 2026-02-18

  CVE-2026-2654 huggingface smolagents LocalPythonExecutor requests.post server-side request forgery

  CVSS 6.3 mediumEPSS 0.43%

• 2026-02-02

  CVE-2026-0599 Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference

  CVSS 7.5 highEPSS 29.9%

• 2025-12-23

  CVE-2025-14925 Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.37%

• 2025-12-23

  CVE-2025-14922 Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.37%

• 2025-12-23

  CVE-2025-14931 Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability

  CVSS 10.0 criticalEPSS 1.2%

• 2025-12-23

  CVE-2025-14930 Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.33%

• 2025-12-23

  CVE-2025-14928 Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.34%

• 2025-12-23

  CVE-2025-14924 Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.33%

• 2025-12-23

  CVE-2025-14920 Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.36%

• 2025-12-23

  CVE-2025-14926 Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.34%

• 2025-12-23

  CVE-2025-14927 Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.34%

• 2025-12-23

  CVE-2025-14921 Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.33%

• 2025-12-23

  CVE-2025-14929 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability

  CVSS 7.8 highEPSS 0.37%

• 2025-10-22

  CVE-2025-11844 XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function

  CVSS 5.4 mediumEPSS 0.28%

• 2025-09-23

  CVE-2025-6921 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 5.3 mediumEPSS 0.51%

• 2025-09-21

  CVE-2025-10772 huggingface LeRobot ZeroMQ Socket lekiwi_remote.py missing authentication

  CVSS 6.3 mediumEPSS 0.29%

• 2025-09-14

  CVE-2025-6051 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 5.3 mediumEPSS 0.38%

• 2025-09-12

  CVE-2025-6638 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 5.3 mediumEPSS 0.55%

• 2025-08-06

  CVE-2025-5197 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 5.3 mediumEPSS 0.39%

• 2025-07-27

  CVE-2025-5120 Sandbox Escape Vulnerability in huggingface/smolagents

  CVSS 7.6 highEPSS 26.3%

• 2025-07-11

  CVE-2025-3933 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 5.3 mediumEPSS 0.50%

• 2025-07-07

  CVE-2025-3777 Improper Input Validation in huggingface/transformers

  CVSS 3.5 lowEPSS 0.41%

• 2025-07-07

  CVE-2025-3264 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 5.3 mediumEPSS 0.50%

• 2025-07-07

  CVE-2025-3263 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 5.3 mediumEPSS 0.50%

• 2025-07-07

  CVE-2025-3262 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 5.3 mediumEPSS 0.49%

• 2025-05-19

  CVE-2025-2099 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 5.3 mediumEPSS 0.61%

• 2025-04-29

  CVE-2025-1194 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 4.3 mediumEPSS 0.48%

• 2025-03-20

  CVE-2024-12720 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

  CVSS 5.3 mediumEPSS 0.75%

All vendors’ CVEs · JSON · Markdown

• CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
• This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
• Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
• EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)