The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HHuggingface Transformers
APPHuggingface< 4.38.0
Related vulnerabilities
RCE w Huggingface Transformers — obejście trust_remote_code w LightGlue
A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library ...
A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbit...
Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerab...
Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnera...