CVE-2024-11392: Hugging Face Transformers MobileViTV2 deserialization leads to code execution

Summary

CVE-2024-11392 is a remote code execution flaw in the Hugging Face Transformers MobileViTV2 component. The flaw sits in how configuration files are handled, where user-supplied data is not properly validated and can be deserialized. An attacker can run code in the context of the current user, but only if the target visits a malicious page or opens a malicious file.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• transformersPyPILLM dependency since 2016-08-17 · 141 tracked dependents

Related items

• HighCVE-2026-119120: Crawl4AI Docker API lets clients choose the HuggingFace model it loadsSame vendor · NVD/CVE Database
• HighGHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-100653: vLLM unpinned Hugging Face artifact loads for FunAudioChat and Tarsier2Same vendor · NVD/CVE Database
• HighGHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-80047: Hugging Face Transformers writes remote Python files to disk before trust checkSame vendor · NVD/CVE Database