CVE-2026-1839

A vulnerability in the HuggingFace Transformers library, specifically in the "Trainer" class, allows for arbitrary code execution. The "loadrngstate" method in "src/transformers/trainer.py" at line 3059 calls "torch.load" without the "weightsonly=True" parameter. This issue affects all versions o...