CVE-2024-3568

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine.

• CWE-502

• https://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125Patch
• https://huntr.com/bounties/b3c36992-5264-4d7f-9906-a996efafba8fExploit, Third Party Advisory
• https://github.com/huggingface/transformers/commit/693667b8ac8138b83f8adb6522ddaf42fa07c125Patch
• https://huntr.com/bounties/b3c36992-5264-4d7f-9906-a996efafba8fExploit, Third Party Advisory

Published

Apr 10, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-35674Missing Authorization vulnerability in Unlimited Elements Un…8.8
• CVE-2024-35675Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2024-35676Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2024-35677Improper Limitation of a Pathname to a Restricted Directory …9.8
• CVE-2024-35678Improper Neutralization of Special Elements used in an SQL C…8.8
• CVE-2024-35679Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2024-35680Improper Neutralization of Script-Related HTML Tags in a Web…5.3
• CVE-2024-35681Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2024-35682Exposure of Sensitive Information to an Unauthorized Actor v…5.3
• CVE-2024-35683Missing Authorization vulnerability in Teplitsa of social te…5.3
• CVE-2024-35684Cross-Site Request Forgery (CSRF) vulnerability in 10up Elas…4.3
• CVE-2024-35685Missing Authorization vulnerability in Anders Norén Radcliff…5.3