Insecure Deserialization Vulnerability in Hugging Face Datasets by Hugging Face
CVE-2026-57845

8.7HIGH

Key Information:

Vendor

Huggingface

Status
Datasets
Vendor
CVE Published:
23 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-57845?

Hugging Face Datasets version 5.1.0 is susceptible to an insecure deserialization vulnerability that facilitates arbitrary code execution. The flaw arises from the use of a deprecated pandas package builder, enabling attackers to create a malicious pickle file. When this file is processed using pandas.read_pickle() within the datasets.load_dataset function, it executes code within the context of the victim’s process, posing a serious security threat.

Affected Version(s)

datasets 0 <= 5.1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-57845 - Proof of Concept

References

https://github.com/SaiTeja-Erukude/CVE-2026-57845-hf-data...
technical-descriptionexploit
https://github.com/huggingface/datasets/pull/8879
patch
https://www.vulncheck.com/advisories/hugging-face-dataset...
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sai Teja Erukude
.