CVE-2026-80047

creationtimestamp| type| source ---|---|--- 2026-09-02 02:49:01+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muiwdwyln52l 2026-09-02 07:30:52+00:00| seen| https://bsky.app/profile/newsfacts.bsky.social/post/3mujg3vvro22j...

PT-2026-84227

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers versions 4.49.0 through 5.8.1 Description A consent-bypass issue exists where remote Python files are written to the local disk without user consent. This occurs when using the load custom generate function, which...