Hugging Face Flaw Lets Malicious AI Models Plant Python Code on User Systems

Cybersecuritynews •Abinaya • September 2, 2026

A newly disclosed vulnerability in Hugging Face Transformers could allow malicious AI model repositories to place attacker-controlled Python files on a user’s system before the user approves remote code execution. Tracked as CVE-2026-80047, the issue affects Hugging Face Transformers versions 4.49.0 through 5.8.1. The flaw lies in the library’s custom generation-loading process. It can allow […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hugging Face Transformers Vulnerability Allows Unauthorized Code Execution A vulnerability in the Hugging Face Transformers library (versions 4.49.0 to 5.8.1) enables remote attacker-controlled Python files to be written to a user's local disk without consent. This issue, tracked as CVE-2026-80047, arises from the library's custom generation-loading process, which performs a remote module fetch and local cache write before evaluating user consent. As a result, malicious code can be stored in the user's cache, potentially leading to unintended execution during future model loads. The flaw affects users who load models from untrusted repositories and is particularly concerning in environments where cache paths are reused. Currently, no patch or advisory from the vendor is available, and users are advised to avoid untrusted models and inspect their cache regularly. The vulnerability was reported by Prasanna Dabi and documented by the CERT Coordination Center. 3 sources 58

Extracted Entities

Hugging Face Flaw Lets Malicious AI Models Plant Python Code on User Systems

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)