Skip to content

CVE-2025-14930

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
June 4, 2026
Last Seen
June 4, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in Hugging Face Transformers Library Disclosed72.0

A critical remote code execution (RCE) vulnerability has been identified in the Hugging Face Transformers library, tracked as CVE-2026-4372. This flaw allows attackers to execute arbitrary code during model loading by bypassing the trust_remote_code=False safeguard. The vulnerability affects all ver...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Cwe-502 - Deserialization Of Untrusted DataHugging Face HubHugging Face Transformers LibraryDeserialization Of Untrusted Data