CVE-2024-11394: Hugging Face Transformers Trax model deserialization remote code execution

Summary

CVE-2024-11394 is a remote code execution flaw in Hugging Face Transformers' handling of Trax model files. The component fails to validate user-supplied data, leading to deserialization of untrusted data. An attacker can run code in the context of the current user if the target visits a malicious page or opens a malicious file.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• transformersPyPILLM dependency since 2016-08-17 · 141 tracked dependents

Topics

• Model and package supply chain

Related items

• HighCVE-2026-119120: Crawl4AI Docker API lets clients choose the HuggingFace model it loadsSame vendor · NVD/CVE Database
• HighGHSA-wf6j-7hvr-gr93: Hydra legacy target blacklist permits unsafe PyYAML loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-100653: vLLM unpinned Hugging Face artifact loads for FunAudioChat and Tarsier2Same vendor · NVD/CVE Database
• HighGHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadingSame vendor · Hugging Face Security Advisories
• MediumCVE-2026-80047: Hugging Face Transformers writes remote Python files to disk before trust checkSame vendor · NVD/CVE Database