Hugging Face Transformers GLM4 Deserialization RCE
Hugging Face Transformers
An insecure deserialization vulnerability resides in Hugging Face Transformers during GLM4 weight parsing. The flaw allows remote code execution when parsing untrusted model weights.
disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why
- CVSS
- 7.8
- EPSS
- <0.01 · top 74% · 2026-11-13
- fix status
- Fix status unknown
- first report
- 23 Dec 2025
- last update
- 23 Dec 2025
- CVE ids
Timeline · 1
Sources · 1
Advisories and databases
- 2025-12-23CVE-2025-14930: Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability.NVD · nvd.nist.gov/vuln/detail/CVE-2025-14930
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Infrastructure vulnerabilitySupply chain
- severity
- 2 · Disclosed vulnerability
- fix status
- Fix status unknown
- targets
- Framework / tooling
- owasp llm top 10
- LLM03:2025 Supply Chain
- mitre atlas
- AML.T0010 AI Supply Chain Compromise
- dates
- happened 23 Dec 2025 · first reported 23 Dec 2025
- origin
- NVDVulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- record
- confidence 0.95 · created 2026-10-18 10:04Z · updated 2026-10-18 10:04Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Hugging Face Transformers GLM4 Deserialization RCE https://gcdradar.vercel.app/incidents/hugging-face-transformers-glm4-deserialization-rce · AIR-2025-0517 · closed 2025-12-23 - Lane: Patch now - Severity: 2 (Disclosed vulnerability) - Fix status: Fix status unknown - First reported: 2025-12-23 - AI role: Attack on AI - Products: Hugging Face Transformers - CVE ids: CVE-2025-14930 - CVSS: 7.8 ## Summary An insecure deserialization vulnerability resides in Hugging Face Transformers during GLM4 weight parsing. The flaw allows remote code execution when parsing untrusted model weights. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2025-12-23: CVE-2025-14930: Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. (https://nvd.nist.gov/vuln/detail/CVE-2025-14930) ## Sources - 2025-12-23 NVD: CVE-2025-14930: Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. https://nvd.nist.gov/vuln/detail/CVE-2025-14930 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed7.8Hugging Face libraries Hugging Face Transformers Perceiver Model Deserialization RCE
Patch now · Disclosed · since 23 Dec 2025 · CVE-2025-14920
AI - closed7.8Hugging Face libraries Hugging Face Transformers Transformer-XL Deserialization RCE
Patch now · Disclosed · since 23 Dec 2025 · CVE-2025-14921
AI - closed7.8Hugging Face libraries Hugging Face Transformers SEW-D convert_config Code Injection RCE
Patch now · Disclosed · since 23 Dec 2025 · CVE-2025-14927
AI - closed7.8Hugging Face libraries Hugging Face Transformers HuBERT convert_config Code Injection RCE
Patch now · Disclosed · since 23 Dec 2025 · CVE-2025-14928
AI - closed7.8Hugging Face libraries CVE-2025-14929: Hugging Face Transformers Deserialization Vulnerability
Patch now · Disclosed · since 23 Dec 2025 · CVE-2025-14929
AI - closed7.8Hugging Face libraries CVE-2025-14926: Hugging Face Transformers Code Injection Vulnerability
Patch now · Disclosed · since 23 Dec 2025 · CVE-2025-14926
AI