Reported by 2 outlets
Hugging Face Transformers CVE-2026-80047 Allows Code Execution Before User Consent
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.55 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Hugging Face Transformers Flaw Writes Attacker-Controlled Python Code Before User Consent
cyberpress.org · 41d ago · September 2nd, 2026
A newly disclosed vulnerability in the Hugging Face Transformers library can cause attacker-controlled Python code to be written to a local system before a user decides whether to trust and execute remote code. Tracked as CVE-2026-80047 and documented in CERT Coordination Center Vulnerability Note VU#456290, the issue affects Hugging Face Transformers versions 4.49.0 through 5.8.1. The flaw specifically impacts the GenerativePreTrainedModel.load_custom_generate() workflow used to load custom generation logic from model repositories. Hugging Face Transformers Flaw Hugging Face Transformers is widely used for building, training, and operating machine-learning workloads across natural-language processing, computer vision, audio, video, and multimodal AI. Its ability to load custom code from remote model repositories provides flexibility, but requires users to explicitly approve such behavior through the trust_remote_code mechanism. In affected versions, that consent boundary is enforced too late. CERT/CC said the vulnerable code path fetches a remote Python module and writes it to the local Hugging Face module cache before evaluating the trust_remote_code prompt. When a model uses a custom generation implementation, Transformers retrieves custom_generate/generate.py from the model repository through the get_cached_module_file() function. The file is then copied into the user’s local cache, typically located at ~/.cache/huggingface/modules . Only after this download-and-write ope
-
update from gbhackers.com
Hugging Face Transformers Flaw Writes Malicious Python Code to Disk Before User Consent
gbhackers.com · 41d ago · September 2nd, 2026
According to the CERT Coordination Center Vulnerability Note VU#456290, the flaw […] The post Hugging Face Transformers Flaw Writes Malicious Python Code to Disk Before User Consent appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .