AI agent vulnerability · Transformers

CVE-2025-3777: Transformers's Improper Input Validation vulnerability can be exploited through username injection

lowCVSS 3.0 3.5GHSA-phhr-52qp-3mj4

Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the imageutils.py file. The vulnerability arises from insecure URL validation using the startswith() method, which can be bypassed through URL username injection.

Published Jul 7, 2025 · Updated Jul 8, 2025

Affected packages

transformers

Ecosystem: PyPI
Affected: < 4.52.1
Fixed in: 4.52.1
Check: pip show transformers

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the image_utils.py file. The vulnerability arises from insecure URL validation using the startswith() method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration. The issue is fixed in version 4.52.1.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Transformers vulnerabilities

All Transformers entries