01 Record

CVE-2026-15679

Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

HighPUBLISHEDCNA: zdi

Base score7.8 CVSS v3.xCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

02 Description

Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Published

2026-08-20 16:24Z1 DAY AGO

Last updated

2026-08-21 20:08Z5 HR AGO

Reserved

2026-07-13

Assigning CNA

zdi

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

SSVC decision

ExploitationnoneAutomatablenoTechnical Impacttotal

Data version

5.2

Document digest

336f2b136c925badc17d3df61f1f3e89e96ebe5094a3d347b190c3fc59b27f9d

VendorProductVersionsPlatforms

Hugging FacePyTorch Image Models1.0.24—