CVE-2025-14920
Deserialization RCE in Hugging Face Transformers Perceiver Model
Publication date: 2025-12-23
Last updated on: 2025-12-23
Assigner: Zero Day Initiative
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| hugging_face | transformers | 3.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-502 | The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a remote code execution flaw in the Hugging Face Transformers library, specifically in the Perceiver model. It occurs because the software improperly validates model files during parsing, allowing deserialization of untrusted data. An attacker can exploit this by tricking a user into visiting a malicious webpage or opening a malicious file, which then lets the attacker execute arbitrary code with the current user's privileges. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability allows an attacker to execute arbitrary code on your system with the same privileges as the current user. This can lead to unauthorized access, data theft, data modification, or disruption of services, impacting confidentiality, integrity, and availability of your system. [1]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, avoid opening untrusted model files or visiting untrusted webpages that may contain malicious Perceiver model files. Ensure that you only use model files from trusted sources. Additionally, keep the Hugging Face Transformers library updated to the latest version where this vulnerability is patched. [1]