{"affected":[{"defaultStatus":"unknown","ecosystem":"github","packageName":"huggingface/datasets","product":"datasets","source":"CNA: VulnCheck","vendor":"huggingface","versions":[{"lessThanOrEqual":"5.1.0","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"5.2.0","versionType":"semver"}]}],"cveId":"CVE-2026-57845","cwes":["CWE-502"],"description":"Hugging Face Datasets before 5.2.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed by Pandas._generate_tables via pandas.read_pickle() without validation, so when a victim calls datasets.load_dataset(\"pandas\", data_files=...), the embedded __reduce__ payload executes code with the victim process's privileges.","epss":{"date":"2026-11-12","percentile":0.4636,"score":0.00547},"exploits":[{"kind":"exploit","source":"CNA: VulnCheck","url":"https://github.com/SaiTeja-Erukude/CVE-2026-57845-hf-datasets-rce"}],"kev":null,"metrics":[{"score":8.7,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":8.8,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794509320649,"publishedAt":1792768460497,"references":[{"source":"CNA: VulnCheck","tags":["technical-description","exploit"],"url":"https://github.com/SaiTeja-Erukude/CVE-2026-57845-hf-datasets-rce"},{"source":"CNA: VulnCheck","tags":["release-notes"],"url":"https://github.com/huggingface/datasets/releases/tag/5.2.0"},{"source":"CNA: VulnCheck","tags":["patch","issue-tracking"],"url":"https://github.com/huggingface/datasets/pull/8879"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/hugging-face-datasets-pickle-deserialization-rce-via-pandas-builder"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/huggingface/datasets/pull/8879"}],"revision":"1115d659631c7e1ae3a66d595d62e8b6e7cd4382291a43bd6b7b7e3fb92c3546","sources":[{"modifiedAt":1794509320649,"name":"CNA: VulnCheck","retrievedAt":1794510623592,"url":"https://www.cve.org/CVERecord?id=CVE-2026-57845"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794510640599,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-57845"}],"ssvc":{"assessedAt":1793296698702,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Hugging Face Datasets < 5.2.0 Pickle Deserialization RCE via Pandas Builder","updatedAt":1794510640599}