Transformers Deserialization of Untrusted Data vulnerability

緊急 9.6CVE-2024-3568 · GHSA-37q5-v5qm-c9v8 · PYSEC-2026-1978 · 10/04/2024 公開 · 17/06/2026 更新

要点

CVE-2024-3568 は transformers, transformers (huggingface) に影響する深刻度「緊急」 (CVSS 9.6) の脆弱性です。
今後30日間に悪用される確率（EPSS）：2.1%（全脆弱性の 81.6% より高い）。
対処：4.38.0 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
transformers PyPI	`< 4.38.0`	`4.38.0`
transformers huggingface	`< 4.38.0`	`4.38.0`

概要

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the load_repo_checkpoint() function of the TFPreTrainedModel() class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of pickle.load() on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.

NVD の説明

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.