CVE-2026-5241Disclosure(huggingface / transformers)

LOWCVSS 9.6 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch huggingface transformers systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the `trust_remote_code` parameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when loading a LightGlue model using `AutoModel.from_pretrained()` with `trust_remote_code=False`, the `LightGlueConfig` reads the `trust_remote_code` value from the untrusted `config.json` file and propagates it into nested `AutoConfig.from_pretrained()` calls. This results in the execution of attacker-provided Python modules, even when the victim explicitly disables remote code execution. The vulnerability poses a high risk for environments such as API inference servers, research notebooks, CI/CD pipelines, and model evaluation workers, potentially leading to credential theft, lateral movement, or persistence/backdoor deployment.

huggingface CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://github.com/huggingface/transformers/commit/676559d5022b74aaa0cee1cee0842b7f27c5320e

Exploit / PoC references

Other references

Weakness type (CWE)

CWE-829

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

transformers

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-06-03); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

huggingface

Products

transformers

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5241

Full discourse2 posts

White Rabbitx 🏴‍☠️@TheRabbitPy136d
Disclosure
24 HIGH-severity CVEs dropped today. Key ones to watch: 🔥 AI/ML: CVE-2026-5241: huggingface/transformers ... RCE via trust_remote_code bypass when loading LightGlue models (even with trust_remote_code=False) 💥 Buffer Overflow → Root: CVE-2026-35085/84/83: gdv-serverconfig, dali-devconfig ... stack overflow → full root CVE-2022-49042/036: Synology ... local RCE via MinGW DLL & OpenSSL config 📁 Arbitrary File Ops (user → root): CVE-2026-35082/80/79/78/77/76: ugw-* & bac-scanresult ... read/terminate/delete arbitrary files & processes 🌐 Web/App: CVE-2025-15655: Mojoomla ... SQL injection CVE-2025-15654: Fox-themes Prague ... Reflected XSS CVE-2025-14772/73: ABB T-MAC Plus ... auth bypass + XSS 🔧 PrivEsc: CVE-2025-41259: SWUpdate ... TOCTOU → root CVE-2025-15656: Mojoomla ... privilege escalation 📡 Network: CVE-2026-37460: FRRouting ... crafted BGP UPDATE → DoS Patch priority: AI infra, Synology backups, ugw devices, SWUpdate, Mojoomla, ABB T-MAC.
Post summary
The post announces 24 newly discovered high‑severity CVEs, details their impact and affected products, and lists patch priorities for several critical systems.
11000129
1.3K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds137d
Disclosure
CVE-2026-5241 Remote Code Execution in Hugging Face Transformers 5.2.0 LightGlue Model Loading https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5241
Post summary
The text announces a new RCE vulnerability in Hugging Face Transformers 5.2.0 LightGlue model loading, providing basic technical details but no PoC, exploit, mitigation, or evidence of active exploitation.
0000047
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	huggingface	transformers	5.2.0	-	-

Explore more

Back to dashboard huggingface CVEs transformers vulnerabilities