CVE-2025-3262: huggingface/transformers ReDoS in SETTING_RE regex in chat.py

Summary

CVE-2025-3262 is a Regular Expression Denial of Service (ReDoS) flaw in huggingface/transformers version 4.49.0. The inefficient regex in the SETTING_RE variable, within transformers/commands/chat.py, uses repetition groups and non-optimized quantifiers, causing exponential backtracking on 'almost matching' payloads. Specially crafted input strings can degrade performance and cause a denial of service.

Mitigation

Fixed in 4.51.0.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• transformersPyPILLM dependency since 2016-08-17 · 141 tracked dependents

Related items

• HighCVE-2026-119120: Crawl4AI Docker API lets clients choose the HuggingFace model it loadsSame vendor · NVD/CVE Database
• HighGHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-100653: vLLM unpinned Hugging Face artifact loads for FunAudioChat and Tarsier2Same vendor · NVD/CVE Database
• HighGHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-80047: Hugging Face Transformers writes remote Python files to disk before trust checkSame vendor · NVD/CVE Database