Threat Intelligence Database

A vulnerability in Hugging Face Transformers versions 4.49.0 through 5.8.1 allows remote Python files to be written to local disk without user consent when using the GenerativePreTrainedModel.load_custom_generate() function. The function caches a remote module file before performing the trust check, causing attacker-controlled code to be saved persistently even if the user declines to trust it. Execution of this code is blocked by the trust prompt, but the unauthorized files remain on disk and may cause stale cache collisions in future trusted model loads.

CVE-2026-5241 is a high-severity vulnerability in Red Hat AI Inference Server 3.4.5 (spyre) affecting the mlx-lm product, specifically in the huggingface/transformers LightGlue model loading path. It allows arbitrary code execution during model initialization. The vulnerability has a CVSS score of 8.0 and requires user interaction with high attack complexity. No known exploits in the wild have been reported. The Red Hat advisory lists this CVE among multiple others affecting the product but does not provide specific patch or fix details.

CVE-2025-68146 is a TOCTOU race condition vulnerability in the filelock library affecting Unix, Linux, macOS, and Windows. It allows local attackers with filesystem and symlink creation access to exploit a race window during lock file creation, potentially truncating or corrupting arbitrary user files. The issue impacts dependent projects such as virtualenv, PyTorch, poetry, and tox. The vulnerability is fixed in filelock version 3.20.1 by preventing symlink following during file open operations. Partial mitigations exist but do not fully eliminate the risk.

Red Hat® AI Inference Server Model Optimization Tools

A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.