OpenAttack

Documentation • Features & Uses • Usage Examples • Attack Models • Toolkit Design OpenAttack is an open-source Python-based textual adversarial attack toolkit, which handles the whole process of textual adversarial attacking, including preprocessing text, accessing the victim model, generating...

FULL-ANALYSIS---CVE-2026-45829-ChromaDB-

CVE-2026-45829 - ChromaDB Pre-Auth RCE CVSS 10.0 ⚠️ WARNING This repository contains a FUNCTIONAL PoC for CVE-2026-45829. ONLY for authorized testing in controlled environments. Description Critical vulnerability in ChromaDB versions 1.0.0 to 1.5.8 that allows an unauthenticated attacker to execut...

CVE-2024-11393

CVE-2024-11393 Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious...

EasyOCR

EasyOCR Ready-to-use OCR with 80+ supported languages and all popular writing scripts including: Latin, Chinese, Arabic, Devanagari, Cyrillic, etc. Try Demo on our website Integrated into Huggingface Spaces 🤗 using Gradio. Try out the Web Demo: What's new 24 September 2024 - Version 1.7.2 Fix...

CVE-2024-11392

CVE-2024-11392 Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious configuratio...

Pickle-Deserialization-Exploit-in-Transformers

Exploiting Pickle Deserialization Vulnerability in Transformers Experiment Introduction Introduces the pickle deserialization mechanism and its reduce attack principle, reproduces the deserialization vulnerability CVE-2024-3568 in the Hugging Face Transformers library, analyzes security risks in...

CVE-2025-11844-smolagents

🔐 Smolagents XPath Injection Simulation Framework CVE-2025-11844 An educational auditing sandbox and dynamic proof-of-concept scanner demonstrating the XPath Injection vulnerability found within Hugging Face's smolagents library up to version 1.2.0. 🔍 Vulnerability Profile Metric| Details ---|---...

CVE-2026-57845-hf-datasets-rce

CVE-2026-57845: Hugging Face datasets = 5.1.0 Pandas Pickle RCE Severity: High, CVSS 3.1 8.8 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected: all Hugging Face datasets versions = 5.1.0 Component: datasets.packagedmodules.pandas.pandas CWE: CWE-502 Deserialization of Untrusted Data...

CVE-2026-23001-Hugging-Face-Transformers-Model-Deserialization-Arbitrary-Code-via-Pickle-

CVE-2026-23001 – Hugging Face Transformers Model Deserialization RCE Overview Hugging Face models saved with torch.save use Python’s pickle serialization, which is inherently unsafe. If a user downloads a seemingly legitimate model from a repository, loading it can trigger arbitrary code executio...

CVE-2024-11394

CVE-2024-11394 Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability High-level overview and effects of the vulnerability: The vulnerability allows an attacker to execute arbitrary code on the host machine by supplying a malicious reformer trax...

llm-forensics

LLM Forensics Weight-level forensics for causal language models. Point it at two models and it tells you how they are related — and what one of them was taught. Question| Analysis ---|--- How much, and where, did a fine-tune move the weights?| Weight Diff Which tokens do the heaviest updates...

SE6013_Project

CVE-2026-4372: Threat Model, Root Cause & Defence Defensive analysis of a critical remote code execution RCE bug in Hugging Face transformers. Contents 1. Vulnerability at a glance 2. Confirm from primary sources first 3. Threat model 4. Root cause 5. Defence 6. Detection 1. Vulnerability at a...

CVE-2026-122160

A flaw was found in AIlice. The Hugging Face model wrapper fails to properly restrict or validate model paths within the LoadModelPEFT function. A remote attacker could exploit this vulnerability by supplying a manipulated model path, causing the application to load and execute untrusted external...

CVE-2026-123019

A flaw was found in DB-GPT's Hugging Face adapter. A remote attacker could exploit this vulnerability by manipulating the trustremotecode setting when loading model repositories. This causes the application to include and run untrusted external code, leading to arbitrary code execution on the hos...

CVE-2026-85670

A flaw was found in the Hugging Face tokenizers library. A remote attacker could provide a specially crafted tokenizer.json file, which, when processed, leads to an out-of-bounds buffer access. This vulnerability can cause the application to terminate, resulting in a denial of service. In certain...

llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection

CVE-2026-58116 — LLaMA-Factory WebUI RCE via trustremotecode Proof of concept for CVE-2026-58116 CVSS 9.8 Critical: remote code execution in LLaMA-Factory = v0.9.5. The LLaMA-Factory WebUI hardcodes trustremotecode=True when loading a model src/llamafactory/webui/chatter.py:139 and...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in Hugging Face Transformers (CVE-2026-75104)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in Hugging Face Transformers. Under certain conditions, an attacker could exploit this vulnerability to access files outside the intended model directory. Hugging Face Transformers is used in our Speech Service Runtime...

SUSE CVE-2026-57845

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

Spring Office Hours Podcast: S5E27 - Hugging Face for Java Developers with Pratik Patel

Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun are joined by Java Champion Pratik Patel to talk about Hugging Face for Java developers. Hugging Face hosts over a million open models, but most Java developers have never used one...

Hugging Face LeRobot deserialization injection vulnerability

A security vulnerability exists in Hugging Face LeRobot versions 0.4.0 through 0.6.1. This vulnerability stems from unsafe dynamic class instantiation in the frompretrained method and related paths. When loading policy processor configurations from a repository, the class field within JSON...