Database/AI/ML frameworks & serving
Hugging Face Accelerate: checkpoint parsing deserializes untrusted data into code execution
Impact
Accelerate is the launcher and state-loader under a large share of multi-GPU training and distributed inference jobs, so this flaw sits on a path almost every fleet exercises. A crafted checkpoint loaded during resume or state restore executes attacker code in the worker process, with that worker's GPUs, mounts and credentials. On multi-node jobs the same poisoned state file is typically read by every rank, so one file compromises every worker in the job at once.
Who can reach it
No authentication against the library. The attacker needs write access to a checkpoint or state directory that a job resumes from, or the ability to get a job to load an untrusted checkpoint. Code runs as the job's user.
What to do
No fixed version is given in the record. Lock down write access to shared checkpoint directories - a resume path that any tenant can write to is the real exposure here - and prefer safetensors-based state. When a fixed release appears it is a pip upgrade and a restart of training launchers; no node drain or reboot.
References
Related entries
- Hugging Face Transformers: convert_config executes strings from a checkpoint in three speech model convertersCVE-2025-14926 · Hugging Face Transformers (SEW, SEW-D and HuBERT convert_config)High
- Hugging Face Transformers: X-CLIP checkpoint conversion deserializes untrusted data into code executionCVE-2025-14929 · Hugging Face Transformers (X-CLIP checkpoint conversion)High
- Hugging Face Transformers: GLM4 weight parsing deserializes untrusted data into code executionCVE-2025-14930 · Hugging Face Transformers (GLM4 weight loader)High
- LlamaIndex CLI: OS command injection via the `--files` argumentCVE-2025-1753 · LlamaIndex CLIHigh
- nbconvert: Template-driven conversion executes attacker contentCVE-2025-53000 · nbconvertHigh
- Linux i915 GPU kernel driver (execbuffer VMA array): The execbuffer VMA array was not zero-initialised, soCVE-2025-71130 · Linux i915 GPU kernel driver (execbuffer VMA array)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.