CVE-2026-5241

[CVE catalog]

Severity

Critical · CVSS 9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Published

Jun 3, 2026, 12:33:10 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.60% · Oct 25, 2026

A flaw was found in python-transformers. An attacker can exploit this vulnerability by providing a malicious model repository. During model initialization, the `trust_remote_code` parameter, intended to prevent remote code execution, is overridden by untrusted configuration data. This allows the attacker to execute arbitrary code, potentially leading to credential theft, unauthorized access, or the deployment of backdoors. python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting This Important vulnerability in `python-transformers` allows for arbitrary code execution when loading a malicious LightGlue model, even if `trust_remote_code` is explicitly set to `False`. This occurs because untrusted serialized configuration data can override the security setting in nested model loading paths. Red Hat products utilizing `python-transformers` for AI/ML workloads, such as Red Hat AI Inference Server and Red Hat OpenShift AI, are affected, posing a significant risk of credential theft or system compromise if untrusted models are processed. The LightGlue model (and its vulnerable trust_remote_code handling) was introduced in transformers 4.53.0 and fixed in 5.5.0; the CNA-published affected range is all versions before 5.5.0. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.