VU#456290: Hugging Face Transformers library writes remote code to disk prior to consent check
Brief
Overview
A vulnerability in the Hugging Face Transformers library (versions 4.
- 0 through 5.
- 1) allows remote, attacker‑controlled Python files to be written to the local disk without user authorization. The library performs a remote module fetch and local cache write before evaluating the trust_remote_code consent prompt, violating the security contract enforced across other dynamic module-loading paths in the library.
Description
Hugging Face Transformers serves as a primary framework for defining and operating modern machine learning models including NLP, computer vision, audio, video, and multimodal systems, for both training and inference. As detailed in CVE‑2026‑80047 , affected versions (4.
- 0 through 5.
- 1) implement GenerativePreTrainedModel.