{"data":{"id":"d9fb875c-732d-4b1f-bafb-82d55106e6b2","title":"CVE-2024-3568: The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted…","summary":"CVE-2024-3568 affects the huggingface/transformers library through unsafe deserialization in the load_repo_checkpoint() function of the TFPreTrainedModel() class. The function calls pickle.load() on data from potentially untrusted sources, so a crafted serialized payload can execute arbitrary code when a victim loads a seemingly harmless checkpoint during normal training.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-3568","publishedAt":"2024-04-10T21:15:58.160Z","cveId":"CVE-2024-3568","cweIds":["CWE-502"],"cvssScore":"9.6","cvssSeverity":"critical","severity":"critical","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["transformers@< 4.38.0 (fixed: 4.38.0)"],"affectedPackageNames":["transformers"],"affectedPackageRefs":["pypi:transformers"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["huggingface/transformers","TFPreTrainedModel"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"huggingface/transformers arbitrary code execution via untrusted deserialization","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.02084,"epssCheckedAt":"2026-11-04T18:09:13.788Z","kevDateAdded":null,"advisoryAliases":["GHSA-37q5-v5qm-c9v8"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:56:17.547Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2024-02-21T13:39:58.756Z","daysToFix":-49,"fixCheckedAt":"2026-10-29T21:46:13.182Z","capecIds":["CAPEC-586"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"transformers","fixedVersion":"4.38.0","matchedVersion":"4.38.0","fixReleasedAt":"2024-02-21T13:39:58.756Z","daysToFix":-49,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:46:13.031Z"}]}}