| Package | Affected versions | Patched versions |
|---|---|---|
| transformers | < 5.0.0< 5.0.0rc3 | 5.0.05.0.0rc3 |
| transformers | = 5.0.0< 5.0.0 | 5.0.0 |
A vulnerability in the HuggingFace Transformers library, specifically in the Trainer class, allows for arbitrary code execution. The _load_rng_state() method in src/transformers/trainer.py at line 3059 calls torch.load() without the weights_only=True parameter. This issue affects all versions of the library supporting torch>=2.2 when used with PyTorch versions below 2.6, as the safe_globals() context manager provides no protection in these versions. An attacker can exploit this vulnerability by supplying a malicious checkpoint file, such as rng_state.pth, which can execute arbitrary code when loaded. The issue is resolved in version v5.0.0rc3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free