{"schema":"threatline.record/2","record":{"id":"CVE-2026-57845","aliases":[],"summary":"Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas Builder","details":"Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed by Pandas._generate_tables via pandas.read_pickle() without validation, so when a victim calls datasets.load_dataset(\"pandas\", data_files=...), the embedded __reduce__ payload executes code with the victim process's privileges.","categories":["Unclassified"],"product":"datasets","vendor":"huggingface","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-57845","source_modified_at":"2026-10-23T15:14:20.497Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"datasets","vendor":"huggingface","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"5.1.0"}],"defaultStatus":"unknown"}],"fixed_versions":[],"cvss":8.7,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-23T15:14:20.497Z","modified_at":"2026-10-23T15:14:20.497Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-57845","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T15:14:20.497Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://github.com/SaiTeja-Erukude/CVE-2026-57845-hf-datasets-rce","tags":["technical-description","exploit"]},{"source":"CVE List","url":"https://github.com/huggingface/datasets/pull/8879","tags":["patch"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/hugging-face-datasets-pickle-deserialization-rce-via-pandas-builder","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-23T15:14:20.497Z","content_hash":"73b2615ab6122a306438d334d38bd3649c7f17eeec6a3d1c007abd8998803202"}}