CVE-2024-11392: Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability
Summary
CVE-2024-11392: Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. Affects transformers versions < 4.48.0. Fixed in 4.48.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Hugging Face Transformers is a popular library in the machine learning ecosystem, primarily used for natural language processing tasks. It provides pre-trained models and tools for building and deploying state-of-the-art machine learning models. The library is widely adopted due to its ease of use and extensive documentation. However, it is susceptible to vulnerabilities that can lead to severe security risks, such as remote code execution.
Vulnerability Detail
The vulnerability identified as CVE-2024-11392 arises from improper handling of configuration files within the Hugging Face Transformers library. Specifically, the flaw is due to a lack of validation for user-supplied data, allowing for the deserialization of untrusted data. This can enable remote attackers to execute arbitrary code on affected installations, provided that the user interacts with a malicious page or file. The potential ramifications include unauthorized access to sensitive information and complete control over the affected system, making it a critical security concern.
How To Fix
Latest published version: 5.20.2 as of 22 Oct 2026
pip install --upgrade "transformers==5.20.2"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.48.0
This is the first release that contains the fix.
pip install --upgrade "transformers==4.48.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users are advised to avoid opening untrusted configuration files or visiting unknown web pages that may exploit this vulnerability until the package is updated to a secure version.
Conclusion
CVE-2024-11392 is a significant vulnerability in the Hugging Face Transformers library that poses a serious risk of remote code execution. Users are strongly encouraged to update to the latest version to mitigate this risk. Awareness and prompt action are essential to maintaining the security of applications utilizing this library.
See every vulnerability recorded for transformers →
FAQ
CVE-2024-11392 is a vulnerability in the Hugging Face Transformers library that allows remote code execution due to deserialization of untrusted data.
If you are using a version of the Hugging Face Transformers library prior to 4.48.0, your installation may be affected by this vulnerability.
If an immediate update is not possible, avoid interacting with untrusted files or web pages that could exploit this vulnerability.
The vulnerability can lead to remote code execution, allowing attackers to gain unauthorized access to systems and sensitive data.
More information can be found in the official advisory on the GitHub advisory database or by using tools like Vulert to monitor for vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for transformers.
