{
 "id": "AIR-2025-0519",
 "slug": "hugging-face-transformers-megatron-gpt2-deserialization-rce",
 "title": "Hugging Face Transformers Megatron GPT2 Deserialization RCE",
 "summary": "An unpatched remote code execution vulnerability exists in Hugging Face Transformers due to unsafe deserialization of model checkpoints. Attackers can exploit the lack of validation when users process malicious files or pages.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "supply_chain"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Transformers",
  "megatron_gpt2"
 ],
 "incident_date": "2025-12-23",
 "incident_date_precision": "day",
 "first_reported": "2025-12-23",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14924",
   "publisher": "NVD",
   "title": "CVE-2025-14924: Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability.",
   "published_at": "2025-12-23"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2025-14924",
  "rce",
  "deserialization"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}