CVE-2026-80047

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 2, 2026

Last Seen

September 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Hugging Face Transformers Vulnerability Allows Unauthorized Code Execution57.8

A vulnerability in the Hugging Face Transformers library (versions 4.49.0 to 5.8.1) enables remote attacker-controlled Python files to be written to a user's local disk without consent. This issue, tracked as CVE-2026-80047, arises from the library's custom generation-loading process, which performs...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Hugging Face Transformers Vulnerability Allows Unauthorized Code Execution

Sep 2·3 sources

Related Entities

Malware Zero-day Exploit CWE-94 - Code Injection Hugging Face Transformers

CVE-2026-80047

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Hugging Face Transformers Vulnerability Allows Unauthorized Code Execution

Related Articles (2)

Hugging Face Transformers Flaw Writes Malicious Python Code to Disk Before User Consent

Hugging Face Flaw Lets Malicious AI Models Plant Python Code on User Systems

Related Entities