Demeng Chen

A flaw exists in Hugging Face Transformers related to the parsing of checkpoints, allowing remote attackers to execute arbitrary code. The issue stems from insufficient validation of user-supplied data, leading to the deserialization of untrusted data. User interaction is required, such as visiting a malicious page or opening a malicious file, to trigger exploitation. The vulnerability was identified as ZDI-CAN-28308.

A flaw exists in Hugging Face Transformers related to the parsing of weights, stemming from insufficient validation of user-supplied data. This can lead to the deserialization of untrusted data, potentially allowing a remote attacker to execute arbitrary code. User interaction is required, as the target must visit a malicious page or open a malicious file to trigger the issue. The vulnerability was assigned ZDI-CAN-28309.

A flaw exists in Hugging Face smolagents that allows remote attackers to execute arbitrary code on affected systems. Authentication is not required for exploitation. The issue stems from insufficient validation of user-supplied data during the parsing of pickle data, leading to the deserialization of untrusted data. An attacker can exploit this to execute code within the service account context.