AI agent vulnerability · Transformers

CVE-2026-1839: HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class

mediumCVSS 3.0 6.5GHSA-69w3-r845-3855

A vulnerability in the HuggingFace Transformers library, specifically in the Trainer class, allows for arbitrary code execution. The loadrngstate() method in src/transformers/trainer.py at line 3059 calls torch.load() without the weightsonly=True parameter.

Published Apr 7, 2026 · Updated Apr 8, 2026

Affected packages

transformers

Ecosystem: PyPI
Affected: < 5.0.0rc3
Fixed in: 5.0.0rc3
Check: pip show transformers

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A vulnerability in the HuggingFace Transformers library, specifically in the Trainer class, allows for arbitrary code execution. The _load_rng_state() method in src/transformers/trainer.py at line 3059 calls torch.load() without the weights_only=True parameter. This issue affects all versions of the library supporting torch>=2.2 when used with PyTorch versions below 2.6, as the safe_globals() context manager provides no protection in these versions. An attacker can exploit this vulnerability by supplying a malicious checkpoint file, such as rng_state.pth, which can execute arbitrary code when loaded. The issue is resolved in version v5.0.0rc3.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Transformers vulnerabilities

All Transformers entries