Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad substring matching on the user-supplied model_name parameter, allowing a value such as attacker/foo-privacy-filter-bar to route through a path that loads Hugging Face models with trust_remote_code=True. An unauthenticated attacker can supply a malicious model repository containing custom Transformers code via auto_map in config.json or tokenizer_config.json, which is imported and executed with the privileges of the OpenMed service process.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-02 | 1 | Patch1 |
| 2026-06-03 | 1 | Disclosure1 |
🚨 CVE-2026-47117 — CVSS 9.8/10 ██████████ OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/gVWooN8qWF
Post summary
The tweet highlights a critical remote code execution vulnerability in OpenMed and urges users to apply the available patch immediately.
🚨 Critical - OpenMed Remote Code Execution via Unsafe Model Loading (CVE-2026-47117) OpenMed's privacy-filter dispatcher uses broad substring matching on the user-supplied model_name parameter, letting an unauthenticated attacker load a malicious Hugging Face model with trust_remote_code=True and execute arbitrary code as the OpenMed service process (CVSS 9.3, no auth, no interaction required). 👉 Affected: OpenMed before 1.5.2 | Upgrade to 1.5.2
Post summary
A new critical remote code execution vulnerability (CVE‑2026‑47117) in OpenMed’s privacy‑filter dispatcher allows unauthenticated attackers to execute arbitrary code via unsafe Hugging Face model loading, and a patch (v1.5.2) is available to remediate it.