# Hugging Face vulnerabilities Source: https://junglewise.ai/threats/vendors/hugging-face Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 11:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/hugging-face.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 24 vulnerabilities in Hugging Face: 1 in the last 7 days and 6 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-124588, was published on 9 November 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. 3 technologies have a page of their own. ## Counts - Last 7 days: 1 - Last 30 days: 3 - Last 90 days: 6 - All time: 24 (1 critical, 0 exploited in the wild) ## About Hugging Face Company providing machine learning models, datasets, and tools for natural language processing and computer vision. ## Latest Hugging Face vulnerabilities - [CVE-2026-124588: Hugging Face finetrainers code injection in model index handler](https://junglewise.ai/threats/cve-2026-124588-a-security-flaw-has-been-discovered-in-huggingface-finetrainers) (medium, CVSS 6.3, published 9 Nov 2026) - [CVE-2026-115533: LeRobot unsafe dynamic class instantiation in from_pretrained()](https://junglewise.ai/threats/cve-2026-115533-the-lerobot-library-is-vulnerable-to-arbitrary-code-execution) (info, published 26 Oct 2026) - [CVE-2026-57845: Hugging Face Datasets insecure deserialization in pandas builder](https://junglewise.ai/threats/cve-2026-57845-hugging-face-datasets-through-5-1-0-contains-an-insecure) (high, CVSS 8.8, published 23 Oct 2026) - [CVE-2026-85670: Hugging Face tokenizers buffer overflow in BpeBuilder](https://junglewise.ai/threats/cve-2026-85670-hugging-face-tokenizers-buffer-overflow-in-bpebuilder) (medium, CVSS 6.5, published 4 Sep 2026) - [CVE-2026-80047: Hugging Face Transformers arbitrary file write via load_custom_generate](https://junglewise.ai/threats/cve-2026-80047-hugging-face-transformers-arbitrary-file-write-via-load-custom) (high, CVSS 7.8, published 1 Sep 2026) - [CVE-2026-15679: Hugging Face PyTorch Image Models unsafe checkpoint deserialization](https://junglewise.ai/threats/cve-2026-15679-hugging-face-pytorch-image-models-unsafe-checkpoint) (high, CVSS 7.8, published 20 Aug 2026) - [CVE-2026-9856: Hugging Face Transformers path traversal in save_pretrained](https://junglewise.ai/threats/cve-2026-9856-hugging-face-transformers-path-traversal-in-save-pretrained) (high, CVSS 7.1, published 2 Aug 2026) - [CVE-2026-68770: Hugging Face sentence-transformers code execution via trust_remote_code bypass](https://junglewise.ai/threats/cve-2026-68770-hugging-face-sentence-transformers-code-execution-via-trust) (critical, CVSS 9.8, published 31 Jul 2026) - [CVE-2026-66007: Hugging Face Datasets path traversal in folder-based builders](https://junglewise.ai/threats/cve-2026-66007-hugging-face-datasets-path-traversal-in-folder-based-builders) (medium, CVSS 6.5, published 24 Jul 2026) - [CVE-2026-65010: Hugging Face Datasets symlink following in Extractor.extract](https://junglewise.ai/threats/cve-2026-65010-hugging-face-datasets-symlink-following-in-extractor-extract) (medium, CVSS 6.6, published 23 Jul 2026) - [CVE-2026-65920: Hugging Face Diffusers path traversal in _get_checkpoint_shard_files](https://junglewise.ai/threats/cve-2026-65920-hugging-face-diffusers-path-traversal-in-get-checkpoint-shard) (medium, CVSS 4.3, published 23 Jul 2026) - [CVE-2026-63086: Hugging Face text-generation-inference SSRF in multimodal chat endpoint](https://junglewise.ai/threats/cve-2026-63086-hugging-face-text-generation-inference-ssrf-in-multimodal-chat) (high, CVSS 8.6, published 16 Jul 2026) - [CVE-2026-45804: Hugging Face Diffusers remote code execution via trust_remote_code bypass](https://junglewise.ai/threats/cve-2026-45804-hugging-face-diffusers-remote-code-execution-via-trust-remote) (high, CVSS 7.5, published 15 Jul 2026) - [CVE-2025-3933: PYSEC-2026-1977 - Transformers is vulnerable to ReDoS attack through its DonutProcessor class](https://junglewise.ai/threats/cve-2025-3933-hugging-face-transformers-redos-in-donutprocessor) (low, CVSS 3.1, published 7 Jul 2026) - [CVE-2024-3568: PYSEC-2026-1978 - Transformers Deserialization of Untrusted Data vulnerability](https://junglewise.ai/threats/cve-2024-3568-hugging-face-transformers-deserialization-of-untrusted-data) (low, CVSS 3, published 7 Jul 2026) - [CVE-2026-5241: Hugging Face Transformers RCE in LightGlue model loading](https://junglewise.ai/threats/cve-2026-5241-hugging-face-transformers-rce-in-lightglue-model-loading) (high, CVSS 8, published 3 Jun 2026) - [CVE-2026-4372: HuggingFace transformers remote code execution via config.json](https://junglewise.ai/threats/cve-2026-4372-huggingface-transformers-remote-code-execution-via-config-json) (high, CVSS 7.8, published 24 May 2026) - [CVE-2026-44827: Hugging Face Diffusers remote code execution via None.py bypass](https://junglewise.ai/threats/cve-2026-44827-hugging-face-diffusers-remote-code-execution-via-none-py-bypass) (high, CVSS 8.8, published 14 May 2026) - [CVE-2026-44513: Hugging Face Diffusers remote code execution in DiffusionPipeline](https://junglewise.ai/threats/cve-2026-44513-hugging-face-diffusers-remote-code-execution-in-diffusionpipeline) (high, CVSS 8.8, published 14 May 2026) - [CVE-2024-11394: Hugging Face Transformers deserialization of untrusted data in model files](https://junglewise.ai/threats/cve-2024-11394-hugging-face-transformers-deserialization-of-untrusted-data-in) (high, CVSS 8.8, published 23 Nov 2024) - [CVE-2024-11392: Hugging Face Transformers deserialization of untrusted data in config handling](https://junglewise.ai/threats/cve-2024-11392-hugging-face-transformers-deserialization-of-untrusted-data-in) (high, CVSS 7.5, published 23 Nov 2024) - [CVE-2024-11393: Hugging Face Transformers deserialization of untrusted data in model parsing](https://junglewise.ai/threats/cve-2024-11393-hugging-face-transformers-deserialization-of-untrusted-data-in) (high, CVSS 8.8, published 23 Nov 2024) - [CVE-2023-6730: PYSEC-2023-300 - Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.](https://junglewise.ai/threats/cve-2023-6730-hugging-face-transformers-deserialization-of-untrusted-data) (low, CVSS 3.1, published 19 Dec 2023) - [CVE-2023-2800: PYSEC-2023-299 - Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.](https://junglewise.ai/threats/cve-2023-2800-hugging-face-transformers-insecure-temporary-file-in-model-loading) (low, CVSS 3.1, published 18 May 2023) ## Most severe Hugging Face vulnerabilities - [CVE-2026-68770: Hugging Face sentence-transformers code execution via trust_remote_code bypass](https://junglewise.ai/threats/cve-2026-68770-hugging-face-sentence-transformers-code-execution-via-trust) (critical, CVSS 9.8, published 31 Jul 2026) - [CVE-2024-11393: Hugging Face Transformers deserialization of untrusted data in model parsing](https://junglewise.ai/threats/cve-2024-11393-hugging-face-transformers-deserialization-of-untrusted-data-in) (high, CVSS 8.8, published 23 Nov 2024) - [CVE-2024-11394: Hugging Face Transformers deserialization of untrusted data in model files](https://junglewise.ai/threats/cve-2024-11394-hugging-face-transformers-deserialization-of-untrusted-data-in) (high, CVSS 8.8, published 23 Nov 2024) - [CVE-2026-44513: Hugging Face Diffusers remote code execution in DiffusionPipeline](https://junglewise.ai/threats/cve-2026-44513-hugging-face-diffusers-remote-code-execution-in-diffusionpipeline) (high, CVSS 8.8, published 14 May 2026) - [CVE-2026-44827: Hugging Face Diffusers remote code execution via None.py bypass](https://junglewise.ai/threats/cve-2026-44827-hugging-face-diffusers-remote-code-execution-via-none-py-bypass) (high, CVSS 8.8, published 14 May 2026) - [CVE-2026-57845: Hugging Face Datasets insecure deserialization in pandas builder](https://junglewise.ai/threats/cve-2026-57845-hugging-face-datasets-through-5-1-0-contains-an-insecure) (high, CVSS 8.8, published 23 Oct 2026) - [CVE-2026-63086: Hugging Face text-generation-inference SSRF in multimodal chat endpoint](https://junglewise.ai/threats/cve-2026-63086-hugging-face-text-generation-inference-ssrf-in-multimodal-chat) (high, CVSS 8.6, published 16 Jul 2026) - [CVE-2026-5241: Hugging Face Transformers RCE in LightGlue model loading](https://junglewise.ai/threats/cve-2026-5241-hugging-face-transformers-rce-in-lightglue-model-loading) (high, CVSS 8, published 3 Jun 2026) - [CVE-2026-4372: HuggingFace transformers remote code execution via config.json](https://junglewise.ai/threats/cve-2026-4372-huggingface-transformers-remote-code-execution-via-config-json) (high, CVSS 7.8, published 24 May 2026) - [CVE-2026-15679: Hugging Face PyTorch Image Models unsafe checkpoint deserialization](https://junglewise.ai/threats/cve-2026-15679-hugging-face-pytorch-image-models-unsafe-checkpoint) (high, CVSS 7.8, published 20 Aug 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 2 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 1 | 0 | 0 | | 26 Oct 2026 | 1 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## Hugging Face technologies - [Hugging Face Transformers](https://junglewise.ai/threats/technologies/transformers): 11 vulnerabilities - [Hugging Face Diffusers](https://junglewise.ai/threats/technologies/diffusers): 4 vulnerabilities - [Hugging Face Datasets](https://junglewise.ai/threats/technologies/datasets): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Hugging Face vulnerabilities", https://junglewise.ai/threats/vendors/hugging-face, 9 November 2026.