CYBERHAWK / CVE / CVE-2026-5241

CVE-2026-5241

Hugging Face Transformers

CRITICAL CVSS 9.6 ai vibe oss

The flaw

LightGlue model loading bypasses trust_remote_code protection allowing arbitrary code execution.

What to do

Update transformers to version newer than 5.2.0

▸ Scan my repo for CVE-2026-5241

References

First seen 2026-06-05 · Tracked by PickBits CyberHawk · Weekly CVE digest