Huggingface Datasets vulnerabilities
3 vulnerabilities
Known vulnerabilities in Huggingface Datasets, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2026-57845huggingface · datasetsHugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas BuilderHugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed by Pandas._generate_tables via pandas.read_pickle() without validation, so when a victim calls datasets.load_dataset("pandas", data_files=...), the embedded __reduce__ payload executes code with the victim process's privileges.CVSS8.8HighEPSS0.55%RoutineCVE-2026-66007huggingface · datasets +10 moreDatasets Path Traversal via Unsanitized file_name MetadataDatasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted file_name values with directory traversal sequences to read arbitrary local files, which are then embedded into output when save_to_disk or push_to_hub is called.CVSS6.9MediumEPSS0.55%RoutineCVE-2026-65010huggingface · datasetsDatasets Symlink-following Arbitrary File Write via Extractor.extract()Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can redirect archive extraction to arbitrary filesystem locations in shared-cache environments, enabling overwrite of sensitive files and potential privilege escalation or code execution.CVSS6.6MediumEPSS0.17%