CVE-2026-5241 - Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers
CVE ID :CVE-2026-5241 Published : June 3, 2026, 2:16 p.m. | 57 minutes ago Description :A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The issue...