SB2026072823 - Deserialization of untrusted data in HuggingFace Transformers

Description

This security bulletin contains information about 1 vulnerability.

1) Deserialization of Untrusted Data (CVE-ID: CVE-2026-1839)

CWE-ID: CWE-502 - Deserialization of Untrusted Data

CVSSv4: 7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to execute arbitrary code on the target system.

The vulnerability exists due to the `_load_rng_state()` method in `src/transformers/trainer.py` at line 3059 calls `torch.load()` without the `weights_only=True` parameter. A local user can pass a malicious checkpoint file, such as `rng_state.pth` to the application and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation

Install update from vendor's website.

References

• https://github.com/huggingface/transformers/commit/03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396
• https://huntr.com/bounties/3c77bb97-e493-493d-9a88-c57f5c536485