CVE-2026-80047: A vulnerability in Hugging Face Transformers (versions 4.49.0, <= 5.8.1) allows remote Python files to be written to loc
Summary
A vulnerability in Hugging Face Transformers (a library for building AI models) versions 4.49.0 through 5.8.1 allows attackers to write Python files to a user's computer without permission when using the GenerativePreTrainedModel.load_custom_generate() function. The problem occurs because the function downloads and saves remote code before checking if the user trusts that code, breaking the security model used elsewhere in the library. Even if a user refuses the trust prompt, malicious code files are already saved to disk and can persist across sessions.
Vulnerability Details
EPSS: 0.0%
September 1, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80047
First tracked: September 1, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 95%