GCD AI RADAR
products/hugging-face-libraries

Hugging Face libraries

Filed as: transformers, Transformers, Hugging Face Transformers, Hugging Face, Diffusers, diffusers, HuggingFace, huggingface-cli, sentence-transformers

Records
43
Disclosed CVEs
37
Exploited (sev 3–4)
3
CISA KEV flagged
0

Newest record 2026-09-01 · 37 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Patch now: confirmed exploitation or KEV · 3

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

  1. 2026-08-31
    Autonomous OpenAI Evaluation Agents Compromise Hugging Face Infrastructure
    3 Exploitedagent-breakout · hugging-face · exploitgym · autonomous-agents
    record AIR-2026-0364MITRE ATLAS ↗
  2. 2025-04-22
    Malicious Models with Embedded Malware Discovered on Hugging Face
    3 Exploitedhugging-face · malicious-models · deserialization · supply-chain
    record AIR-2025-0057MITRE ATLAS ↗
  3. 2023-12-01
    AI Hallucinations Exploited for Supply Chain Attacks via Slopsquatting
    3 Exploitedslopsquatting · hallucination · supply_chain
    record AIR-2023-0025AI Incident Database ↗

Disclosures by month · last 24 months

Nov ’2433 disclosed · peak 8 in Dec ’25Oct ’26

Disclosed CVEs, no confirmed exploitation · 37

  1. 2026-09-01
    CVE-2026-80047
    Hugging Face Transformers Downloads Custom Code Before Consent
    2 Disclosedcode_execution · supply_chain
    record AIR-2026-0099GitHub Advisory Database ↗
  2. 2026-08-17
    CVE-2026-75104
    CVE-2026-75104: Hugging Face Transformers vulnerable to arbitrary file read
    2 Disclosedhuggingface · path_traversal
    record AIR-2026-0088NVD ↗
  3. 2026-08-02
    CVE-2026-9856
    Hugging Face Transformers save_pretrained allows arbitrary file writes
    2 Disclosedtransformers · path-traversal
    record AIR-2026-0872GitHub Advisory Database ↗
  4. 2026-07-31
    CVE-2026-68770
    CVE-2026-68770: sentence-transformers local model loading remote code execution vulnerability
    2 Disclosedrce · deserialization
    record AIR-2026-0043GitHub Advisory Database ↗
  5. 2026-06-03
    CVE-2026-5241
    HuggingFace transformers vulnerable to arbitrary code execution in LightGlue loader
    2 Disclosedrce · model_loading
    record AIR-2026-0721GitHub Advisory Database ↗
  6. 2026-05-26
    CVE-2026-4372
    HuggingFace transformers vulnerable to remote code execution via config.json
    2 Disclosedrce · deserialization
    record AIR-2026-0717GitHub Advisory Database ↗
  7. 2026-05-20
    CVE-2026-45804
    CVE-2026-45804: Diffusers remote code execution vulnerability
    2 Disclosedrce · diffusers
    record AIR-2026-0712GitHub Advisory Database ↗
  8. 2026-05-07
    CVE-2026-44827
    Hugging Face Diffusers custom pipeline trust_remote_code bypass vulnerability
    2 Discloseddiffusers · rce · trust_remote_code
    record AIR-2026-0622GitHub Advisory Database ↗
  9. 2026-05-07
    CVE-2026-44513
    Hugging Face Diffusers trust_remote_code bypass allows remote code execution
    2 Discloseddiffusers · rce · trust_remote_code
    record AIR-2026-0621GitHub Advisory Database ↗
  10. 2026-04-07
    CVE-2026-1839
    CVE-2026-1839: HuggingFace Transformers Arbitrary Code Execution in Trainer
    2 Disclosedrce · huggingface · pytorch
    record AIR-2026-0558GitHub Advisory Database ↗
  11. 2025-12-23
    CVE-2025-14924
    Hugging Face Transformers Megatron GPT2 Deserialization RCE
    2 Disclosedrce · deserialization
    record AIR-2025-0519NVD ↗
  12. 2025-12-23
    CVE-2025-14920
    Hugging Face Transformers Perceiver Model Deserialization RCE
    2 Discloseddeserialization · rce
    record AIR-2025-0518NVD ↗
  13. 2025-12-23
    CVE-2025-14930
    Hugging Face Transformers GLM4 Deserialization RCE
    2 Discloseddeserialization · rce
    record AIR-2025-0517NVD ↗
  14. 2025-12-23
    CVE-2025-14921
    Hugging Face Transformers Transformer-XL Deserialization RCE
    2 Discloseddeserialization · rce
    record AIR-2025-0516NVD ↗
  15. 2025-12-23
    CVE-2025-14927
    Hugging Face Transformers SEW-D convert_config Code Injection RCE
    2 Disclosedrce · code-injection
    record AIR-2025-0515NVD ↗
  16. 2025-12-23
    CVE-2025-14928
    Hugging Face Transformers HuBERT convert_config Code Injection RCE
    2 Disclosedrce · code-injection
    record AIR-2025-0514NVD ↗
  17. 2025-12-23
    CVE-2025-14929
    CVE-2025-14929: Hugging Face Transformers Deserialization Vulnerability
    2 Disclosedhuggingface · transformers · deserialization
    record AIR-2025-0513NVD ↗
  18. 2025-12-23
    CVE-2025-14926
    CVE-2025-14926: Hugging Face Transformers Code Injection Vulnerability
    2 Disclosedhuggingface · transformers · rce
    record AIR-2025-0512NVD ↗
  19. 2025-09-23
    CVE-2025-6921
    CVE-2025-6921: Hugging Face Transformers vulnerable to ReDoS in optimizer
    2 Disclosedredos · huggingface
    record AIR-2025-0345GitHub Advisory Database ↗
  20. 2025-09-14
    CVE-2025-6051
    CVE-2025-6051: ReDoS vulnerability in Hugging Face Transformers EnglishNormalizer
    2 Disclosedredos · huggingface
    record AIR-2025-0023NVD ↗
  21. 2025-09-12
    CVE-2025-6638
    CVE-2025-6638: Hugging Face Transformers vulnerable to ReDoS via MarianTokenizer
    2 Disclosedredos · denial-of-service
    record AIR-2025-0335GitHub Advisory Database ↗
  22. 2025-08-06
    CVE-2025-5197
    CVE-2025-5197: Hugging Face Transformers ReDoS Vulnerability
    2 Disclosedhuggingface · redos
    record AIR-2025-0321GitHub Advisory Database ↗
  23. 2025-07-11
    CVE-2025-3933
    CVE-2025-3933: Transformers vulnerable to ReDoS in DonutProcessor
    2 Disclosedredos
    record AIR-2025-0316GitHub Advisory Database ↗
  24. 2025-07-07
    CVE-2025-3777
    CVE-2025-3777: Transformers vulnerable to improper input validation in image_utils
    2 Disclosedinput-validation
    record AIR-2025-0313GitHub Advisory Database ↗
  25. 2025-07-07
    CVE-2025-3263
    Hugging Face Transformers vulnerable to ReDoS in configuration utils
    2 Disclosedredos · denial-of-service
    record AIR-2025-0310GitHub Advisory Database ↗
  26. 2025-07-07
    CVE-2025-3264
    Hugging Face Transformers vulnerable to ReDoS in get_imports
    2 Disclosedredos · denial-of-service
    record AIR-2025-0308GitHub Advisory Database ↗
  27. 2025-07-07
    CVE-2025-3262
    Hugging Face Transformers vulnerable to ReDoS in SETTING_RE
    2 Disclosedredos · denial-of-service
    record AIR-2025-0307GitHub Advisory Database ↗
  28. 2025-05-19
    CVE-2025-2099
    CVE-2025-2099: Hugging Face Transformers Regular Expression Denial of Service
    2 Disclosedredos · huggingface
    record AIR-2025-0284GitHub Advisory Database ↗
  29. 2025-04-29
    CVE-2025-1194
    CVE-2025-1194: Transformers Regular Expression Denial of Service Vulnerability
    2 Disclosedredos · denial-of-service
    record AIR-2025-0275GitHub Advisory Database ↗
  30. 2025-03-20
    CVE-2024-12720
    CVE-2024-12720: Transformers ReDoS Vulnerability
    2 Disclosedredos · huggingface
    record AIR-2025-0217GitHub Advisory Database ↗
  31. 2024-11-22
    CVE-2024-11394
    CVE-2024-11394: Deserialization vulnerability in Hugging Face Transformers
    2 Discloseddeserialization · rce
    record AIR-2024-0204NVD ↗
  32. 2024-11-22
    CVE-2024-11393
    CVE-2024-11393: Deserialization vulnerability in Hugging Face Transformers
    2 Discloseddeserialization · rce
    record AIR-2024-0203NVD ↗
  33. 2024-11-22
    CVE-2024-11392
    CVE-2024-11392: Deserialization vulnerability in Hugging Face Transformers
    2 Discloseddeserialization · rce
    record AIR-2024-0202NVD ↗
  34. 2024-04-10
    CVE-2024-3568
    Hugging Face Transformers Deserialization Remote Code Execution
    2 Disclosedrce · deserialization
    record AIR-2024-0083GitHub Advisory Database ↗
  35. 2023-12-20
    CVE-2023-7018
    CVE-2023-7018: Deserialization vulnerability in Hugging Face transformers
    2 Discloseddeserialization
    record AIR-2023-0080GitHub Advisory Database ↗
  36. 2023-12-19
    CVE-2023-6730
    CVE-2023-6730: Deserialization vulnerability in Hugging Face transformers
    2 Discloseddeserialization
    record AIR-2023-0078GitHub Advisory Database ↗
  37. 2023-05-18
    CVE-2023-2800
    CVE-2023-2800: transformers Insecure Temporary File vulnerability
    2 Disclosedinsecure-temporary-file
    record AIR-2023-0047GitHub Advisory Database ↗

Other incidents: research and unexploited reports · 3

  1. 2026-07-31
    Model Namespace Reuse AI Supply Chain Attack
    1 Researchsupply-chain · hugging-face · namespace-reuse
    record AIR-2026-0358MITRE ATLAS ↗
  2. 2025-04-22
    Organization Impersonation and Model Poisoning on Hugging Face
    1 Researchsupply-chain · impersonation · huggingface
    record AIR-2025-0055MITRE ATLAS ↗
  3. 2023-10-30
    PoisonGPT Open Source Model Supply Chain Demonstration
    1 Researchpoisongpt · supply-chain · huggingface
    record AIR-2023-0004MITRE ATLAS ↗

This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.