CVE-2026-80047 | Hugging Face Transformers up to 5.8.1 Trust Verification dynamic_module_utils.py GenerativePreTrainedModel.load_custom_generate dropped privileges

A vulnerability was found in Hugging Face Transformers up to 5.8.1. It has been classified as critical. This affects the function GenerativePreTrainedModel.load_custom_generate of the file dynamic_module_utils.py of the component Trust Verification. Performing a manipulation results in improper check for dropped privileges.

This vulnerability is reported as CVE-2026-80047. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More