Hugging Face libraries
Filed as: transformers, Transformers, Hugging Face Transformers, Hugging Face, Diffusers, diffusers, HuggingFace, huggingface-cli, sentence-transformers
Newest record 2026-10-29 · 37 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 4
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- closedHugging Face libraries Hugging Face malware campaign returns to hijack GPUs
Exploited · No fix needed · since 29 Oct 2026
AI - closedGPT-5.6 Sol Autonomous OpenAI Evaluation Agents Compromise Hugging Face Infrastructure
Exploited · since 8 Jul 2026
AI - closedHugging Face libraries Malicious Models with Embedded Malware Discovered on Hugging Face
Exploited · since 2025 (approx.)
AI - closedHugging Face libraries AI Hallucinations Exploited for Supply Chain Attacks via Slopsquatting
Exploited · since 1 Dec 2023
AI
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 37
- closed7.8Hugging Face libraries Hugging Face Transformers Downloads Custom Code Before Consent
Disclosed · since 1 Sep 2026 · CVE-2026-80047
AI - closed6.8Hugging Face libraries CVE-2026-75104: Hugging Face Transformers vulnerable to arbitrary file read
Disclosed · since 17 Aug 2026 · CVE-2026-75104
AI - closed7.1Hugging Face libraries Hugging Face Transformers save_pretrained allows arbitrary file writes
Disclosed · since 2 Aug 2026 · CVE-2026-9856
AI - closed9.8Hugging Face libraries CVE-2026-68770: sentence-transformers local model loading remote code execution vulnerability
Disclosed · since 31 Jul 2026 · CVE-2026-68770
AI - closed8.0Hugging Face libraries HuggingFace transformers vulnerable to arbitrary code execution in LightGlue loader
Disclosed · since 3 Jun 2026 · CVE-2026-5241
AI - closed7.8Hugging Face libraries HuggingFace transformers vulnerable to remote code execution via config.json
Disclosed · since 26 May 2026 · CVE-2026-4372
AI - closed7.5Hugging Face libraries CVE-2026-45804: Diffusers remote code execution vulnerability
Disclosed · since 20 May 2026 · CVE-2026-45804
AI - closed8.8Hugging Face libraries Hugging Face Diffusers custom pipeline trust_remote_code bypass vulnerability
Disclosed · since 7 May 2026 · CVE-2026-44827
AI - closed8.8Hugging Face libraries Hugging Face Diffusers trust_remote_code bypass allows remote code execution
Disclosed · since 7 May 2026 · CVE-2026-44513
AI - closed6.5Hugging Face libraries CVE-2026-1839: HuggingFace Transformers Arbitrary Code Execution in Trainer
Disclosed · since 7 Apr 2026 · CVE-2026-1839
AI - closed7.8Hugging Face libraries Hugging Face Transformers Megatron GPT2 Deserialization RCE
Disclosed · since 23 Dec 2025 · CVE-2025-14924
AI - closed7.8Hugging Face libraries Hugging Face Transformers Perceiver Model Deserialization RCE
Disclosed · since 23 Dec 2025 · CVE-2025-14920
AI - closed7.8Hugging Face libraries Hugging Face Transformers GLM4 Deserialization RCE
Disclosed · since 23 Dec 2025 · CVE-2025-14930
AI - closed7.8Hugging Face libraries Hugging Face Transformers Transformer-XL Deserialization RCE
Disclosed · since 23 Dec 2025 · CVE-2025-14921
AI - closed7.8Hugging Face libraries Hugging Face Transformers SEW-D convert_config Code Injection RCE
Disclosed · since 23 Dec 2025 · CVE-2025-14927
AI - closed7.8Hugging Face libraries Hugging Face Transformers HuBERT convert_config Code Injection RCE
Disclosed · since 23 Dec 2025 · CVE-2025-14928
AI - closed7.8Hugging Face libraries CVE-2025-14929: Hugging Face Transformers Deserialization Vulnerability
Disclosed · since 23 Dec 2025 · CVE-2025-14929
AI - closed7.8Hugging Face libraries CVE-2025-14926: Hugging Face Transformers Code Injection Vulnerability
Disclosed · since 23 Dec 2025 · CVE-2025-14926
AI - closed5.3Hugging Face libraries CVE-2025-6921: Hugging Face Transformers vulnerable to ReDoS in optimizer
Disclosed · since 23 Sep 2025 · CVE-2025-6921
AI - closed5.3Hugging Face libraries CVE-2025-6051: ReDoS vulnerability in Hugging Face Transformers EnglishNormalizer
Disclosed · since 14 Sep 2025 · CVE-2025-6051
AI - closed5.3Hugging Face libraries CVE-2025-6638: Hugging Face Transformers vulnerable to ReDoS via MarianTokenizer
Disclosed · since 12 Sep 2025 · CVE-2025-6638
AI - closed5.3Hugging Face libraries CVE-2025-5197: Hugging Face Transformers ReDoS Vulnerability
Disclosed · since 6 Aug 2025 · CVE-2025-5197
AI - closed5.3Hugging Face libraries CVE-2025-3933: Transformers vulnerable to ReDoS in DonutProcessor
Disclosed · since 11 Jul 2025 · CVE-2025-3933
AI - closed3.5Hugging Face libraries CVE-2025-3777: Transformers vulnerable to improper input validation in image_utils
Disclosed · since 7 Jul 2025 · CVE-2025-3777
AI - closed5.3Hugging Face libraries Hugging Face Transformers vulnerable to ReDoS in configuration utils
Disclosed · since 7 Jul 2025 · CVE-2025-3263
AI - closed5.3Hugging Face libraries Hugging Face Transformers vulnerable to ReDoS in get_imports
Disclosed · since 7 Jul 2025 · CVE-2025-3264
AI - closed5.3Hugging Face libraries Hugging Face Transformers vulnerable to ReDoS in SETTING_RE
Disclosed · since 7 Jul 2025 · CVE-2025-3262
AI - closed5.3Hugging Face libraries CVE-2025-2099: Hugging Face Transformers Regular Expression Denial of Service
Disclosed · since 19 May 2025 · CVE-2025-2099
AI - closed4.3Hugging Face libraries CVE-2025-1194: Transformers Regular Expression Denial of Service Vulnerability
Disclosed · since 29 Apr 2025 · CVE-2025-1194
AI - closed5.3Hugging Face libraries CVE-2024-12720: Transformers ReDoS Vulnerability
Disclosed · since 20 Mar 2025 · CVE-2024-12720
AI - closed8.8Hugging Face libraries CVE-2024-11394: Deserialization vulnerability in Hugging Face Transformers
Disclosed · since 23 Nov 2024 · updated 23 Nov 2024 · CVE-2024-11394
AI - closed8.8Hugging Face libraries CVE-2024-11393: Deserialization vulnerability in Hugging Face Transformers
Disclosed · since 23 Nov 2024 · updated 23 Nov 2024 · CVE-2024-11393
AI - closed7.5Hugging Face libraries CVE-2024-11392: Deserialization vulnerability in Hugging Face Transformers
Disclosed · since 23 Nov 2024 · updated 23 Nov 2024 · CVE-2024-11392
AI - closed3.4Hugging Face libraries Hugging Face Transformers Deserialization Remote Code Execution
Disclosed · since 10 Apr 2024 · CVE-2024-3568
AI - closed7.8Hugging Face libraries CVE-2023-7018: Deserialization vulnerability in Hugging Face transformers
Disclosed · since 20 Dec 2023 · CVE-2023-7018
AI - closed9.0Hugging Face libraries CVE-2023-6730: Deserialization vulnerability in Hugging Face transformers
Disclosed · since 19 Dec 2023 · CVE-2023-6730
AI - closed4.7Hugging Face libraries CVE-2023-2800: transformers Insecure Temporary File vulnerability
Disclosed · since 18 May 2023 · CVE-2023-2800
AI
Other incidents: research and unexploited reports · 3
- closedHugging Face libraries Model Namespace Reuse AI Supply Chain Attack
Research · since 3 Sep 2025
AI - closedHugging Face libraries Organization Impersonation and Model Poisoning on Hugging Face
Research · since 23 Aug 2023
AI - closedHugging Face libraries PoisonGPT Open Source Model Supply Chain Demonstration
Research · since Jul 2023 (approx.)
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.