Hugging Face Transformers Flaw Writes Malicious Python Code to Disk Before User Consent

Gbhackers •Divya • September 2, 2026

A newly disclosed vulnerability in the Hugging Face Transformers library could allow attacker-controlled Python files to be written to a victim’s system before the user approves the execution of remote code. This vulnerability is tracked as CVE-2026-80047 and affects Transformers versions 4.49.0 through 5.8.1. According to the CERT Coordination Center Vulnerability Note VU#456290, the flaw […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Hugging Face Transformers Vulnerability Allows Unauthorized Code Execution A vulnerability in the Hugging Face Transformers library (versions 4.49.0 to 5.8.1) enables remote attacker-controlled Python files to be written to a user's local disk without consent. This issue, tracked as CVE-2026-80047, arises from the library's custom generation-loading process, which performs a remote module fetch and local cache write before evaluating user consent. As a result, malicious code can be stored in the user's cache, potentially leading to unintended execution during future model loads. The flaw affects users who load models from untrusted repositories and is particularly concerning in environments where cache paths are reused. Currently, no patch or advisory from the vendor is available, and users are advised to avoid untrusted models and inspect their cache regularly. The vulnerability was reported by Prasanna Dabi and documented by the CERT Coordination Center. 3 sources 58

Extracted Entities

Hugging Face Transformers Flaw Writes Malicious Python Code to Disk Before User Consent

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)