CVE-2026-124588: huggingface finetrainers Model Index model.py resolve_component_cls code injection
A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. The impacted element is the function resolvecomponentcls of the file finetrainers/utils/model.py of the component Model Index Handler. Performing a manipulation of the argument Library results in code injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
The affected versions identified are Hugging Face finetrainers 0.1.0 and 0.2.0. The vulnerable code is in the Model Index Handler's resolve_component_cls function in finetrainers/utils/model.py.
What does an attacker need to exploit this issue?
Exploitation involves manipulating the Library argument passed to resolve_component_cls. The attack can be initiated remotely, requires no privileges, and requires user interaction.
Is public exploit code available?
Yes. A proof of concept has been released publicly and may be used in attacks.
Is a vendor fix available?
The provided information does not identify a fix. It states that the project was notified through an issue report but had not responded at the time of publication.