Arbitrary Code Execution in Hugging Face PEFT Modules

CVE-2026-71281

What is CVE-2026-71281?

The Hugging Face PEFT product contains a vulnerability in its LoRA-GA and CorDA initialization modules that allows for arbitrary code execution. This occurs because the modules invoke torch.load() on cache files without the weights_only=True parameter, leading to the unprotected deserialization of potentially malicious files. If an attacker can manipulate or provide a crafted cache or covariance file, it poses significant risks for systems utilizing these modules. Developers are urged to check their version of PEFT and apply necessary patches to mitigate this threat.

References