Platform
python
Component
transformers
Fixed in
4.57.1
CVE-2025-14926 describes a Remote Code Execution (RCE) vulnerability within Hugging Face Transformers versions 4.57.0 through 4.57.0. This flaw stems from insufficient validation when handling user-supplied strings during the configuration conversion process, enabling attackers to execute arbitrary code. The vulnerability requires user interaction, specifically the conversion of a malicious checkpoint, to trigger the code execution. A patch is available in version 4.57.1.
Successful exploitation of CVE-2025-14926 allows an attacker to execute arbitrary code on a system running a vulnerable Hugging Face Transformers instance. This could lead to complete system compromise, including data theft, modification, or destruction. The attacker needs to trick a user into converting a specially crafted checkpoint file. The code will execute in the context of the user running the Transformers code, potentially granting access to sensitive data or resources. This vulnerability shares similarities with other code injection flaws where unchecked user input is used to construct and execute code, potentially leading to a complete takeover of the affected environment.
CVE-2025-14926 was published on December 23, 2025. The vulnerability's exploitation context is currently unclear, and no public proof-of-concept (PoC) has been released. Its EPSS score is pending evaluation. Monitor security advisories and threat intelligence feeds for any indications of active exploitation.
Exploit Status
EPSS
0.10% (27% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2025-14926 is to upgrade Hugging Face Transformers to version 4.57.1 or later. If upgrading immediately is not feasible, carefully scrutinize any checkpoint files before conversion, especially those from untrusted sources. Consider implementing input validation and sanitization within your code to prevent the execution of malicious code. While a WAF or proxy cannot directly prevent this vulnerability, they can be configured to detect and block suspicious checkpoint file uploads or conversions. There are no specific Sigma or YARA rules available at this time, but monitoring for unusual process execution related to Transformers is recommended.
Actualice la biblioteca Hugging Face Transformers a una versión posterior a la 4.57.0. Esto solucionará la vulnerabilidad de inyección de código en la función convert_config. Evite convertir checkpoints de fuentes no confiables.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2025-14926 is a Remote Code Execution vulnerability in Hugging Face Transformers versions 4.57.0–4.57.0, allowing attackers to execute arbitrary code by exploiting a flaw in the checkpoint conversion process.
If you are using Hugging Face Transformers versions 4.57.0 through 4.57.0, you are potentially affected by this vulnerability. Upgrade to 4.57.1 or later to mitigate the risk.
The recommended fix is to upgrade Hugging Face Transformers to version 4.57.1 or a later version. If immediate upgrade is not possible, carefully validate checkpoint files before conversion.
Currently, there are no confirmed reports of active exploitation of CVE-2025-14926, but monitoring for exploitation is recommended.
Refer to the Hugging Face security advisories page for the latest information and updates regarding CVE-2025-14926: [https://huggingface.co/docs/security](https://huggingface.co/docs/security)
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.
Upload your requirements.txt file and we'll tell you instantly if you're affected.