HuggingFace transformers (`Trainer._load_rng_state`): Arbitrary code execution when a training run resumes

Impact

Arbitrary code execution when a training run resumes from a checkpoint

Who can reach it

Customer-supplied or poisoned checkpoint directory in shared storage

What to do

Tenant-owned code; provider must prevent cross-tenant writes to checkpoint directories

References

Related entries

• NVIDIA NeMo Speech: malicious input data leads to remote code executionCVE-2026-24239 · NVIDIA NeMo SpeechHigh
• NVIDIA NeMo Speech: RCE and privilege escalation in the speech data explorerCVE-2026-24267 · NVIDIA NeMo Speech (speech data explorer)High
• BentoML (`safe_extract_tarfile`): Tar extraction escape despite the "safe" helperCVE-2026-27905 · BentoML (`safe_extract_tarfile`)High
• llama.cpp (`ggml_nbytes`): Integer overflow in the core ggml size calculationCVE-2026-33298 · llama.cpp (`ggml_nbytes`)High
• BentoML (`docker.system_packages`): Command injection through the package list fieldCVE-2026-33744 · BentoML (`docker.system_packages`)High
• BentoML (cloud deployment path, setup.sh generation in deployment.py): The March fix that added shlex.quote to theCVE-2026-35043 · BentoML (cloud deployment path, setup.sh generation in deployment.py)High