PT-2025-28155 · Hugging Face · Huggingface/Transformers

Published 2025-03-19 · Updated 2025-08-07 · CVE-2025-3777

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Hugging Face Transformers versions prior to 4.52.1

Description: Hugging Face Transformers is affected by an improper input validation vulnerability in the image utils.py file. The vulnerability stems from insecure URL validation using the startswith() method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration.

Recommendations: Update to Hugging Face Transformers version 4.52.1 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-12551

CVE-2025-3777

GHSA-PHHR-52QP-3MJ4

Affected Products

Huggingface/Transformers

References · 12

• 🔥 https://huntr.com/bounties/ccba0730-9248-4853-b7ff-5c20e6364f09 · Exploit
• https://github.com/huggingface/transformers/commit/4dda5f71b35fb70cf602187eef84bb17a50b9082 · Patch
• https://osv.dev/vulnerability/CVE-2025-3777 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12551 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-3777 · Security Note
• https://osv.dev/vulnerability/GHSA-phhr-52qp-3mj4 · Vendor Advisory
• https://github.com/huggingface/transformers · Note
• https://github.com/huggingface/transformers/blame/a7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4/src/transformers/image_utils.py · Note
• https://t.me/cveNotify/131176 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1942207227651113165 · Twitter Post
• https://twitter.com/CVEnew/status/1942166381350244693 · Twitter Post
• https://twitter.com/aydinnyunuss/status/1942265243091992617 · Twitter Post