MediumVulnerability
CVE-2026-124588: huggingface finetrainers code injection via Library argument
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-124588
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
A security flaw in huggingface finetrainers versions 0.1.0 and 0.2.0 affects the function resolve_component_cls in finetrainers/utils/model.py, part of the Model Index Handler component. Manipulating the Library argument leads to code injection, and the attack can be launched remotely. A public exploit exists, and the project was notified through an issue report but has not responded.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- HighCVE-2026-119120: Crawl4AI Docker API lets clients choose the HuggingFace model it loadsSame vendor · NVD/CVE Database
- HighGHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loadingSame vendor · Hugging Face Security Advisories
- MediumCVE-2026-100653: vLLM unpinned Hugging Face artifact loads for FunAudioChat and Tarsier2Same vendor · NVD/CVE Database
- HighGHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingSame vendor · Hugging Face Security Advisories
- MediumCVE-2026-80047: Hugging Face Transformers writes remote Python files to disk before trust checkSame vendor · NVD/CVE Database