Database/AI/ML frameworks & serving
HuggingFace transformers: Critical RCE in all versions before 5.3.0
CVE-2026-4372AI/ML frameworks & servingcurated
Impact
Critical RCE in all versions before 5.3.0
Who can reach it
Customer-supplied model repo loaded by from_pretrained
What to do
Rebuild every image with transformers >= 5.3.0. Tenant-pinned versions are outside provider control
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.