PT-2025-52385 · Hugging Face · Huggingface/Transformers

Brandon Niemczyk + 2 · Published 2025-12-18 · Updated 2026-01-21 · CVE-2025-14928

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers (affected versions not specified)

Description A flaw exists within the convert config function in Hugging Face Transformers, allowing remote attackers to execute arbitrary code on affected systems. Exploitation requires user interaction, specifically the conversion of a malicious checkpoint. The issue stems from insufficient validation of user-supplied strings before they are used to execute Python code, potentially allowing an attacker to execute code in the context of the current user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-14928

PYSEC-2025-216

ZDI-25-1146

Affected Products

Huggingface/Transformers

References · 7

• https://osv.dev/vulnerability/CVE-2025-14928 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14928 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1146 · Security Note
• https://osv.dev/vulnerability/PYSEC-2025-216 · Vendor Advisory
• https://t.me/cveNotify/149421 · Telegram Post
• https://twitter.com/CVEnew/status/2003700581739974839 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2003598166889799827 · Twitter Post