Trend Zero Day Initiative

A flaw exists within the `convert config` function in Hugging Face Transformers that allows remote attackers to execute arbitrary code on affected installations. Exploitation requires user interaction, specifically the conversion of a malicious checkpoint. The issue stems from insufficient validation of user-supplied strings before they are used to execute Python code, potentially allowing an attacker to execute code in the context of the current user.

Improper control of code generation, specifically code injection, allows an authorized remote attacker to execute arbitrary code over a network. This is caused by the deserialization of untrusted data via the `DataSetSurrogateSelector` function. An attacker can achieve remote code execution on the server by sending a specially crafted POST request containing malicious WebPart markup. Real-world exploitation of this issue has been documented.