PT-2025-52383 · Hugging Face · Huggingface/Transformers

Brandon Niemczyk + 3 · Published 2025-12-18 · Updated 2025-12-24 · CVE-2025-14926

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers (affected versions not specified)

Description A flaw exists within the convert config function in Hugging Face Transformers that allows remote attackers to execute arbitrary code on affected installations. Exploitation requires user interaction, specifically the conversion of a malicious checkpoint. The issue stems from insufficient validation of user-supplied strings before they are used to execute Python code, potentially allowing an attacker to execute code in the context of the current user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-14926

PYSEC-2025-214

ZDI-25-1147

Affected Products

Huggingface/Transformers

References · 5

• https://osv.dev/vulnerability/PYSEC-2025-214 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14926 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1147 · Security Note
• https://osv.dev/vulnerability/CVE-2025-14926 · Vendor Advisory
• https://twitter.com/CVEnew/status/2003700584625635368 · Twitter Post