Demeng Chen

**Name of the Vulnerable Software and Affected Versions** Hugging Face Transformers (affected versions not specified) **Description** A flaw exists in Hugging Face Transformers related to the parsing of checkpoints, allowing remote attackers to execute arbitrary code. The issue stems from insufficient validation of user-supplied data, leading to the deserialization of untrusted data. User interaction is required, such as visiting a malicious page or opening a malicious file, to trigger exploitation. The vulnerability was identified as ZDI-CAN-28308. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hugging Face Transformers (affected versions not specified) **Description** A flaw exists in Hugging Face Transformers related to the parsing of weights, stemming from insufficient validation of user-supplied data. This can lead to the deserialization of untrusted data, potentially allowing a remote attacker to execute arbitrary code. User interaction is required, as the target must visit a malicious page or open a malicious file to trigger the issue. The vulnerability was assigned ZDI-CAN-28309. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hugging Face smolagents (affected versions not specified) **Description** A flaw exists in Hugging Face smolagents that allows remote attackers to execute arbitrary code on affected systems. Authentication is not required for exploitation. The issue stems from insufficient validation of user-supplied data during the parsing of pickle data, leading to the deserialization of untrusted data. An attacker can exploit this to execute code within the service account context. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.