# Hugging Face CVEs > Hugging Face: 53 CVEs mapped to its software or packages (0 in CISA KEV), newest first, with CVSS and EPSS. Canonical: https://rewindex.com/company/hugging-face/cves Last updated: 2026-10-23T15:14:20Z 53 CVEs map to Hugging Face (0 in CISA KEV), newest first. Page 1. Query: `?sev=critical|high|medium|low&kev=yes|no&min_cvss=0..10&q=&page=N`. Company profile: [Hugging Face](https://rewindex.com/company/hugging-face.md) Scope: CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. A mapped CVE is not a statement that Hugging Face’s hosted service was exposed. | Published (UTC) | CVE | Title | CVSS | KEV | | --- | --- | --- | --- | --- | | 2026-10-23 | [CVE-2026-57845](https://rewindex.com/cve/CVE-2026-57845.md) | Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas Builder | 8.8 high | | | 2026-10-11 | [CVE-2026-108857](https://rewindex.com/cve/CVE-2026-108857.md) | Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging | 3.3 low | | | 2026-09-04 | [CVE-2026-85670](https://rewindex.com/cve/CVE-2026-85670.md) | tokenizers BpeBuilder Buffer Overflow via merge token | 6.5 medium | | | 2026-09-01 | [CVE-2026-80047](https://rewindex.com/cve/CVE-2026-80047.md) | Hugging Face Transformers library writes remote code to disk prior to consent check | 7.8 high | | | 2026-08-20 | [CVE-2026-15679](https://rewindex.com/cve/CVE-2026-15679.md) | Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.8 high | | | 2026-08-17 | [CVE-2026-75104](https://rewindex.com/cve/CVE-2026-75104.md) | Hugging Face Transformers Path Traversal via Checkpoint Index | 5.5 medium | | | 2026-08-10 | [CVE-2026-69112](https://rewindex.com/cve/CVE-2026-69112.md) | Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight\_map | 7.1 high | | | 2026-08-05 | [CVE-2026-71281](https://rewindex.com/cve/CVE-2026-71281.md) | peft Unsafe Deserialization via torch.load() Without weights\_only in LoRA-GA and CorDA Modules | 8.8 high | | | 2026-08-02 | [CVE-2026-9856](https://rewindex.com/cve/CVE-2026-9856.md) | Path Traversal in huggingface/transformers | 7.1 high | | | 2026-07-31 | [CVE-2026-68770](https://rewindex.com/cve/CVE-2026-68770.md) | sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust\_remote\_code=False | 9.8 critical | | | 2026-07-24 | [CVE-2026-66007](https://rewindex.com/cve/CVE-2026-66007.md) | Datasets Path Traversal via Unsanitized file\_name Metadata | 6.5 medium | | | 2026-07-23 | [CVE-2026-65010](https://rewindex.com/cve/CVE-2026-65010.md) | Datasets Symlink-following Arbitrary File Write via Extractor.extract() | 6.6 medium | | | 2026-07-23 | [CVE-2026-65920](https://rewindex.com/cve/CVE-2026-65920.md) | Diffusers Path Traversal via weight\_map Arbitrary File Read | 4.3 medium | | | 2026-07-16 | [CVE-2026-63086](https://rewindex.com/cve/CVE-2026-63086.md) | text-generation-inference 3.3.7 SSRF via fetch\_image in multimodal chat completions | 8.6 high | | | 2026-07-15 | [CVE-2026-45804](https://rewindex.com/cve/CVE-2026-45804.md) | Diffusers: TOCTOU Trust Remote Code Bypass | 7.5 high | | | 2026-06-03 | [CVE-2026-5241](https://rewindex.com/cve/CVE-2026-5241.md) | Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers | 8.0 high | | | 2026-05-24 | [CVE-2026-4372](https://rewindex.com/cve/CVE-2026-4372.md) | Arbitrary Remote Code Execution via \`\_attn\_implementation\_internal\` Config Injection in huggingface/transformers | 7.8 high | | | 2026-05-14 | [CVE-2026-44827](https://rewindex.com/cve/CVE-2026-44827.md) | Diffusers: None.py Trust Remote Code Bypass | 8.8 high | | | 2026-05-14 | [CVE-2026-44513](https://rewindex.com/cve/CVE-2026-44513.md) | Diffusers: \`trust\_remote\_code\` bypass via \`custom\_pipeline\` and local custom components | 8.8 high | | | 2026-04-23 | [CVE-2026-25874](https://rewindex.com/cve/CVE-2026-25874.md) | LeRobot Unsafe Deserialization Remote Code Execution via gRPC | 9.8 critical | | | 2026-04-07 | [CVE-2026-1839](https://rewindex.com/cve/CVE-2026-1839.md) | Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading in huggingface/transformers | 6.5 medium | | | 2026-03-27 | [CVE-2026-4963](https://rewindex.com/cve/CVE-2026-4963.md) | huggingface smolagents Incomplete Fix CVE-2025-9959 local\_python\_executor.py evaluate\_with code injection | 6.3 medium | | | 2026-02-18 | [CVE-2026-2654](https://rewindex.com/cve/CVE-2026-2654.md) | huggingface smolagents LocalPythonExecutor requests.post server-side request forgery | 6.3 medium | | | 2026-02-02 | [CVE-2026-0599](https://rewindex.com/cve/CVE-2026-0599.md) | Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference | 7.5 high | | | 2025-12-23 | [CVE-2025-14925](https://rewindex.com/cve/CVE-2025-14925.md) | Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.8 high | | | 2025-12-23 | [CVE-2025-14922](https://rewindex.com/cve/CVE-2025-14922.md) | Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.8 high | | | 2025-12-23 | [CVE-2025-14931](https://rewindex.com/cve/CVE-2025-14931.md) | Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability | 10.0 critical | | | 2025-12-23 | [CVE-2025-14930](https://rewindex.com/cve/CVE-2025-14930.md) | Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.8 high | | | 2025-12-23 | [CVE-2025-14928](https://rewindex.com/cve/CVE-2025-14928.md) | Hugging Face Transformers HuBERT convert\_config Code Injection Remote Code Execution Vulnerability | 7.8 high | | | 2025-12-23 | [CVE-2025-14924](https://rewindex.com/cve/CVE-2025-14924.md) | Hugging Face Transformers megatron\_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.8 high | | | 2025-12-23 | [CVE-2025-14920](https://rewindex.com/cve/CVE-2025-14920.md) | Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.8 high | | | 2025-12-23 | [CVE-2025-14926](https://rewindex.com/cve/CVE-2025-14926.md) | Hugging Face Transformers SEW convert\_config Code Injection Remote Code Execution Vulnerability | 7.8 high | | | 2025-12-23 | [CVE-2025-14927](https://rewindex.com/cve/CVE-2025-14927.md) | Hugging Face Transformers SEW-D convert\_config Code Injection Remote Code Execution Vulnerability | 7.8 high | | | 2025-12-23 | [CVE-2025-14921](https://rewindex.com/cve/CVE-2025-14921.md) | Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.8 high | | | 2025-12-23 | [CVE-2025-14929](https://rewindex.com/cve/CVE-2025-14929.md) | Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.8 high | | | 2025-10-22 | [CVE-2025-11844](https://rewindex.com/cve/CVE-2025-11844.md) | XPath Injection in Hugging Face Smolagents search\_item\_ctrl\_f Function | 5.4 medium | | | 2025-09-23 | [CVE-2025-6921](https://rewindex.com/cve/CVE-2025-6921.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 medium | | | 2025-09-21 | [CVE-2025-10772](https://rewindex.com/cve/CVE-2025-10772.md) | huggingface LeRobot ZeroMQ Socket lekiwi\_remote.py missing authentication | 6.3 medium | | | 2025-09-14 | [CVE-2025-6051](https://rewindex.com/cve/CVE-2025-6051.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 medium | | | 2025-09-12 | [CVE-2025-6638](https://rewindex.com/cve/CVE-2025-6638.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 medium | | | 2025-08-06 | [CVE-2025-5197](https://rewindex.com/cve/CVE-2025-5197.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 medium | | | 2025-07-27 | [CVE-2025-5120](https://rewindex.com/cve/CVE-2025-5120.md) | Sandbox Escape Vulnerability in huggingface/smolagents | 7.6 high | | | 2025-07-11 | [CVE-2025-3933](https://rewindex.com/cve/CVE-2025-3933.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 medium | | | 2025-07-07 | [CVE-2025-3777](https://rewindex.com/cve/CVE-2025-3777.md) | Improper Input Validation in huggingface/transformers | 3.5 low | | | 2025-07-07 | [CVE-2025-3264](https://rewindex.com/cve/CVE-2025-3264.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 medium | | | 2025-07-07 | [CVE-2025-3263](https://rewindex.com/cve/CVE-2025-3263.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 medium | | | 2025-07-07 | [CVE-2025-3262](https://rewindex.com/cve/CVE-2025-3262.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 medium | | | 2025-05-19 | [CVE-2025-2099](https://rewindex.com/cve/CVE-2025-2099.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 medium | | | 2025-04-29 | [CVE-2025-1194](https://rewindex.com/cve/CVE-2025-1194.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 4.3 medium | | | 2025-03-20 | [CVE-2024-12720](https://rewindex.com/cve/CVE-2024-12720.md) | Regular Expression Denial of Service (ReDoS) in huggingface/transformers | 5.3 medium | | Next page: [page 2](https://rewindex.com/company/hugging-face/cves.md?page=2) --- _Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_ ## Charts ### Chart data: CVEs per week, last 52 weeks (Hugging Face) Weeks start Monday, UTC. Bars: CVEs by published date (KEV date added if unpublished), by CVSS severity; kev_added: entries added to CISA KEV that week. Same filters as the list. The current week is partial. | Week of (UTC) | Critical | High | Medium | Low | Not scored | Added to KEV | | --- | --- | --- | --- | --- | --- | --- | | 2025-11-03 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-10 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-17 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-11-24 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-01 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-08 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-15 | 0 | 0 | 0 | 0 | 0 | 0 | | 2025-12-22 | 1 | 10 | 0 | 0 | 0 | 0 | | 2025-12-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-05 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-12 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-19 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-01-26 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-02 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-02-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-02-16 | 0 | 0 | 1 | 0 | 0 | 0 | | 2026-02-23 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-02 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-09 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-16 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-03-23 | 0 | 0 | 1 | 0 | 0 | 0 | | 2026-03-30 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-06 | 0 | 0 | 1 | 0 | 0 | 0 | | 2026-04-13 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-04-20 | 1 | 0 | 0 | 0 | 0 | 0 | | 2026-04-27 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-04 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-05-11 | 0 | 2 | 0 | 0 | 0 | 0 | | 2026-05-18 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-05-25 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-01 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-06-08 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-15 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-22 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-06-29 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-06 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-07-13 | 0 | 2 | 0 | 0 | 0 | 0 | | 2026-07-20 | 0 | 0 | 3 | 0 | 0 | 0 | | 2026-07-27 | 1 | 1 | 0 | 0 | 0 | 0 | | 2026-08-03 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-08-10 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-08-17 | 0 | 1 | 1 | 0 | 0 | 0 | | 2026-08-24 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-08-31 | 0 | 1 | 1 | 0 | 0 | 0 | | 2026-09-07 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-14 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-21 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-09-28 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-05 | 0 | 0 | 0 | 1 | 0 | 0 | | 2026-10-12 | 0 | 0 | 0 | 0 | 0 | 0 | | 2026-10-19 | 0 | 1 | 0 | 0 | 0 | 0 | | 2026-10-26 | 0 | 0 | 0 | 0 | 0 | 0 | --- Canonical: https://rewindex.com/company/hugging-face/cves · Markdown: https://rewindex.com/company/hugging-face/cves.md · JSON: https://rewindex.com/api/v1/companies/hugging-face/cves · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T04:06:18.280Z