CVE-2026-57845
Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows…
- Risk score
- 77/100
- CVSS
- 8.8 v3.1
- Exploit chance (30 days)
- 0.6%
- Published
- 23 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Hugging Face Datasets through version 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code. Attackers can supply a malicious pickle file that executes code with the victim process's privileges.
- Affected
- {'products': ['Hugging Face Datasets'], 'packages': [], 'versions': ['<= 5.1.0']}
- Fix
- Check the linked advisory for a fix; no specific action given
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.8 high
- Remotely exploitable without logging in
- On your watchlist: python
References
Original description
Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed by Pandas._generate_tables via pandas.read_pickle() without validation, so when a victim calls datasets.load_dataset("pandas", data_files=...), the embedded __reduce__ payload executes code with the victim process's privileges.
Last activity 23 Oct 2026. Patch Forecast updates every hour.