AI agent vulnerability · Transformers

CVE-2024-3568: Transformers Deserialization of Untrusted Data vulnerability

lowCVSS 3.0 3.4GHSA-37q5-v5qm-c9v8

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the loadrepocheckpoint() function of the TFPreTrainedModel() class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of pickle.load() on data from potentially untrusted sources.

Published Apr 10, 2024

Affected packages

transformers

Ecosystem: PyPI
Affected: < 4.38.0
Fixed in: 4.38.0
Check: pip show transformers

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the load_repo_checkpoint() function of the TFPreTrainedModel() class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of pickle.load() on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Transformers vulnerabilities

All Transformers entries