PT-2025-52384 · Hugging Face · Huggingface/Transformers

Brandon Niemczyk + 2 · Published 2025-12-18 · Updated 2025-12-24 · CVE-2025-14927

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers (affected versions not specified)

Description A flaw exists in the convert config function that allows remote attackers to execute arbitrary code on affected systems. Exploitation requires user interaction, specifically the conversion of a malicious checkpoint. The issue stems from insufficient validation of user-supplied strings before they are used to execute Python code. An attacker can exploit this to execute code with the privileges of the current user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-14927

PYSEC-2025-215

ZDI-25-1148

Affected Products

Huggingface/Transformers

References · 5

• https://zerodayinitiative.com/advisories/ZDI-25-1148 · Security Note
• https://osv.dev/vulnerability/PYSEC-2025-215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14927 · Security Note
• https://osv.dev/vulnerability/CVE-2025-14927 · Vendor Advisory
• https://twitter.com/CVEnew/status/2003700585581937047 · Twitter Post