Hugging Face Transformers Trax model deserialization RCE vulnerability
A remote code execution vulnerability in Hugging Face Transformers was publicly disclosed by the Zero Day Initiative, affecting the deserialization of Trax model files. The vulnerability requires user interaction and allows attackers to execute arbitrary code with user privileges.
What happened
A vulnerability in Hugging Face Transformers allows remote attackers to execute arbitrary code by exploiting improper validation in the handling of model files, specifically in deserialization of Trax models.
The vulnerability requires user interaction, as the target must visit a malicious page or open a malicious file. The flaw was reported to Hugging Face on 2024-09-13 and initially rejected by the vendor on 2024-10-14.
Reported impact
An attacker can execute code in the context of the current user. The vulnerability has a CVSS score of 8.8, indicating high severity.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.