CVE-2026-57845— Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas Builder
Quick assessment
Affected
huggingface datasets
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Hugging Face Datasets 5.1.0 及更早版本存在不安全反序列化漏洞。攻击者可通过构造恶意的 pickle 文件，利用已废弃的 pandas 包构建器（pandas packaged builder）触发该漏洞，从而执行任意 Python 代码。攻击者可提供一个基于 pickle 的数据集，该数据集在未经任何验证的情况下，经由 Pandas._generate_tables 函数调用 pandas.read_pickle() 进行处理。当受害者调用 datasets.load_dataset("
Possible ATT&CK Techniques 3 AI
T1059 · Command and Scripting Interpreter T1055 · Process Injection T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| huggingface | datasets | ≤ 5.1.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-57845
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas Builder
Source: CVE Program / CVE List V5
Vulnerability Description
Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed by Pandas._generate_tables via pandas.read_pickle() without validation, so when a victim calls datasets.load_dataset("pandas", data_files=...), the embedded __reduce__ payload executes code with the victim process's privileges.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| huggingface | datasets | 0 ~ 5.1.0 | - |
|
II. Public POCs for CVE-2026-57845
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-57845
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-57845 (1)
Vendor Advisories for CVE-2026-57845 (1)
Proof of Concept for CVE-2026-57845 (1)
-
🔗 GitHub - SaiTeja-Erukude/CVE-2026-57845-hf-datasets-rce · GitHub Read full article technical-description exploit
IV. Related Vulnerabilities
Same vendor: huggingface
-
CVE-2026-85670
tokenizers BpeBuilder Buffer Overflow via merge token -
CVE-2026-75104
Hugging Face Transformers Path Traversal via Checkpoint Inde -
CVE-2026-69112
Hugging Face Accelerate 1.14.0 Path Traversal and DoS via we -
CVE-2026-71281
peft Unsafe Deserialization via torch.load() Without weights -
CVE-2026-9856
Path Traversal in huggingface/transformers
Same weakness: CWE-502
-
CVE-2026-114196
WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vul -
CVE-2026-94075
WordPress Newsletters plugin <= 4.18.1 - PHP Object Injectio -
CVE-2026-115806
Prime Mover <= 2.2.1 - Unauthenticated PHP Object Injection -
CVE-2026-114624
baserCMS: PHP object injection via unguarded unserialize() i -
CVE-2026-112848
WordPress Hostme v2 theme <= 7.0 - PHP Object Injection vuln
V. Comments for CVE-2026-57845
No comments yet