CVE-2026-57845

Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas Builder

huggingface datasets

Open in Threatline Record JSON

CVSS

8.7High

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet

Fixed inNone listedNo source names a fixed version. Check the vendor advisory below

Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

@stackflag.bsky.social: CVE-2026-57845 - datasets The Hugging Face Datasets library up to version 5.1.0 can load specially crafted data files that cause the program to execute any code the attacker wants.Bluesky: CVE posts, 24 Oct 2026

Description

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed by Pandas._generate_tables via pandas.read_pickle() without validation, so when a victim calls datasets.load_dataset("pandas", data_files=...), the embedded __reduce__ payload executes code with the victim process's privileges.

Text from CVE List

Affected versions 1

datasetsaffected: all versions through 5.1.0CVE List