Arbitrary Code Execution Vulnerability in HuggingFace Transformers Library

CVE-2026-1839

What is CVE-2026-1839?

A vulnerability in the HuggingFace Transformers library's Trainer class poses a significant risk by allowing for arbitrary code execution through the _load_rng_state() method. This issue arises from an improper call to torch.load(), which does not include the weights_only=True parameter. Versions of the library compatible with torch>=2.2 and running on PyTorch versions earlier than 2.6 are susceptible. Attackers can exploit this flaw by providing a malicious checkpoint file, such as rng_state.pth, resulting in the execution of arbitrary code during the loading process. The vulnerability has been addressed in version v5.0.0rc3.

References