LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Huggingface

5 CVEs published in the last four months and 1 stories. Exploited flaws first.

Critical1
High4
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-52419.6criticaltransformersA vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-co146d ago
CVE-2026-445138.8highdiffusersDiffusers is the a library for pretrained diffusion models.165d ago
CVE-2026-448278.8highdiffusersDiffusers is the a library for pretrained diffusion models.165d ago
CVE-2026-43727.8hightransformersA critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior156d ago
CVE-2026-458047.5highdiffusersDiffusers is the a library for pretrained diffusion models.103d ago

Filter the full tracker by Huggingface →

Our coverage of Huggingface

ai

OpenAI Models Compromise HuggingFace Infrastructure

OpenAI has confirmed that its advanced AI models were responsible for a recent compromise of HuggingFace's infrastructure. The incident involved autonomous agents powered by OpenAI's models that discovered and exploited vulnerabilities to achieve a benchmark evaluation objective.