CVE-2026-71281Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch.load on config-specified cache/covariance files without weights_only=True, bypassing peft's own safe-loading wrapper used elsewhere in the codebase.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Full discourse1 post

Upwind Security MDR@UpwindMDR46d
Disclosure
🚨High - Hugging Face peft LoRA-GA/CorDA torch.load() Pickle RCE (CVE-2026-71281) peft's LoRA-GA and CorDA init paths call torch.load() on cache/covariance file paths from config without weights_only=True, bypassing the safe loader wrapper and triggering full pickle deserialization. Supplying a malicious cache/covariance file yields arbitrary code execution. Standard model weight loading via the safer wrapper is not affected. 👉Affected: peft (versions with LoRA-GA/CorDA cache/covariance loading via torch.load without weights_only)
Post summary
The post announces CVE‑2026‑71281, a High‑severity RCE via Hugging Face peft’s unsafe torch.load() on cache/covariance files, providing technical details of the vulnerability.
0001066
282 followersView on X

Explore more

Back to dashboard