{"data":{"id":"aa7c66c3-8d98-487b-9db2-a5ecfa3fccf5","title":"CVE-2026-80047: A vulnerability in Hugging Face Transformers (versions 4.49.0, <= 5.8.1) allows remote Python files to be written to…","summary":"A vulnerability in Hugging Face Transformers (versions 4.49.0, <= 5.8.1) lets remote Python files be written to local disk without user consent when GenerativePreTrainedModel.load_custom_generate() is used. The function fetches and caches attacker-controlled custom_generate/generate.py into ~/.cache/huggingface/modules before the trust_remote_code consent check, so the file persists even if the user declines the trust prompt. The write is caused by an unconditional file write in dynamic_module_utils.py.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-80047","publishedAt":"2026-09-01T14:17:41.943Z","cveId":"CVE-2026-80047","cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["transformers@>= 4.49.0, <= 5.8.1"],"affectedPackageNames":["transformers"],"affectedPackageRefs":["pypi:transformers"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["Hugging Face Transformers"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Hugging Face Transformers writes remote Python files to disk before trust check","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00099,"epssCheckedAt":"2026-11-04T12:08:35.127Z","kevDateAdded":null,"advisoryAliases":["GHSA-x9r9-c232-4q39"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:44:36.185Z","patchAvailable":null,"disclosureDate":"2026-09-01T14:17:41.943Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[]}}