CVE-2024-3924: A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the…

Summary

CVE-2024-3924 is a code injection flaw in the `autodocs.yml` workflow file of the huggingface/text-generation-inference repository. The workflow builds a package-install command from the untrusted `github.head_ref` value, so an attacker who forks the repository, names a branch with a malicious payload, and opens a pull request to the base repository can achieve arbitrary code execution within the GitHub Actions runner. The issue affects versions up to and including v2.0.0.

Mitigation

Fixed in version 2.0.0.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• text-generationPyPILLM dependency since 2023-03-07

Topics

• Inference infrastructure

Related items

• HighCVE-2026-119120: Crawl4AI Docker API lets clients choose the HuggingFace model it loadsSame vendor · NVD/CVE Database
• HighGHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-100653: vLLM unpinned Hugging Face artifact loads for FunAudioChat and Tarsier2Same vendor · NVD/CVE Database
• HighGHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-80047: Hugging Face Transformers writes remote Python files to disk before trust checkSame vendor · NVD/CVE Database