Vulnerability Description
Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed by Pandas._generate_tables via pandas.read_pickle() without validation, so when a victim calls datasets.load_dataset("pandas", data_files=...), the embedded __reduce__ payload executes code with the victim process's privileges.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/SaiTeja-Erukude/CVE-2026-57845-hf-datasets-rce
- https://github.com/huggingface/datasets/pull/8879
- https://www.vulncheck.com/advisories/hugging-face-datasets-pickle-deserializatio
FAQ
What is CVE-2026-57845?
CVE-2026-57845 is a vulnerability with a CVSS score of 8.8 (HIGH). Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the dep...
How severe is CVE-2026-57845?
CVE-2026-57845 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-57845?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.