{"items":[{"id":"NVI-00016253","kind":"vulnerability","title":"huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-fgcw-684q-jj6r","CVE-2026-5241"],"plain_summary":"GitHub lists this reviewed advisory for transformers. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-572c0fe5f8d3026c5e7ced9c9d0fba43"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-07-21T12:33:27.000Z","value":"8 high","meaning":"GitHub source severity; exploitability and local consequence require separate evidence.","source_id":"sr-572c0fe5f8d3026c5e7ced9c9d0fba43"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-572c0fe5f8d3026c5e7ced9c9d0fba43","url":"https://github.com/advisories/GHSA-fgcw-684q-jj6r","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-fgcw-684q-jj6r","publisher":"GitHub Advisory Database","observed_at":"2026-11-03T22:35:18.117Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-572c0fe5f8d3026c5e7ced9c9d0fba43"],"technology":"transformers","known_exclusions":[],"conditions_summary":"A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue arises because the `trust_remote_code` parameter, intended to prevent remote code execution, is overridden by untrusted serialized configuration data in a nested code path. Specifically, when loading a LightGlue model using `AutoModel.from_pretrained()` with `trust_remote_code=False`, the `LightGlueConfig` reads the `trust_remote_code` value from the untrusted `config.json` file and propagates it into nested `AutoConfig.from_pretrained()` calls. This results in the execution of attacker-provided Python modules, even when the victim explicitly disables remote code execution. The vulnerability poses a high risk for environments such as API inference servers, research notebooks, CI/CD pipelines, and model evaluation workers, potentially leading to credential theft, lateral movement, or persistence/backdoor deployment.","public_affected_ranges":["< 5.5.0"]}],"null_published_at":"2026-11-04T10:04:27.924Z","source_updated_at":"2026-07-21T12:33:27.000Z","source_disclosed_at":"2026-06-03T15:30:43.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-11-03T22:35:18.117Z"}],"next_cursor":null,"snapshot_revision":"42594"}