CVE-2025-14922— Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability
Quick assessment
Affected
Hugging Face Diffusers
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Hugging Face Diffusers是Hugging Face开源的一个Python软件库。 Hugging Face Diffusers存在代码问题漏洞，该漏洞源于CogView4解析检查点时缺乏对用户提供数据的验证，可能导致反序列化不可信数据和远程代码执行。
Possible ATT&CK Techniques 2 AI
T1203 · Exploitation for Client Execution T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-14922
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Diffusers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of checkpoints. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27424.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5
Vulnerability Title
Hugging Face Diffusers 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hugging Face Diffusers是Hugging Face开源的一个Python软件库。 Hugging Face Diffusers存在代码问题漏洞，该漏洞源于CogView4解析检查点时缺乏对用户提供数据的验证，可能导致反序列化不可信数据和远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Hugging Face | Diffusers | 22a452a526660363b57216cd011ce75345382d02 | - |
|
II. Public POCs for CVE-2025-14922
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-14922
请登录查看更多情报信息。
Same Patch Batch · Hugging Face · 2025-12-23 · 11 CVEs total
| CVE-2025-14929 | Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data R | |
| CVE-2025-14928 | Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulne | |
| CVE-2025-14931 | Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Co | |
| CVE-2025-14925 | Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerabil | |
| CVE-2025-14924 | Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Exec | |
| CVE-2025-14927 | Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulner | |
| CVE-2025-14930 | Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vul | |
| CVE-2025-14921 | Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Co | |
| CVE-2025-14926 | Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerab | |
| CVE-2025-14920 | Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Ex |
IV. Related Vulnerabilities
Same vendor: Hugging Face
-
CVE-2026-108857
Hugging Face Text Embeddings Inference through 1.9.4 Clearte -
CVE-2026-80047
Hugging Face Transformers library writes remote code to disk -
CVE-2026-15679
Hugging Face PyTorch Image Models checkpoint Deserialization -
CVE-2026-68770
sentence-transformers Arbitrary Code Execution on Local Mode -
CVE-2026-25874
LeRobot Unsafe Deserialization Remote Code Execution via gRP
Same weakness: CWE-502
-
CVE-2026-12613
Insecure Deserialization Leading to Remote Code Execution in -
CVE-2026-52903
YAML safe_load production fallback to unsafe_load enables RC -
CVE-2026-81797
WordPress Buzz Stone | Magazine & Viral Blog WordPress Theme -
CVE-2026-78535
WordPress Photolia theme <= 1.0.3 - PHP Object Injection vul -
CVE-2026-78533
WordPress Qwery theme <= 3.6.1 - PHP Object Injection vulner
V. Comments for CVE-2025-14922
No comments yet