CyberRota Analysis
AI-GeneratedThe vulnerability exists in the initialization modules of Hugging Face's peft library, where the `torch.load()` function is called without the `weights_only=True` parameter, allowing for full pickle deserialization. This oversight enables the execution of arbitrary code if a malicious cache or covariance file is loaded. Organizations using Hugging Face's peft library, particularly those implementing LoRA-GA or CorDA, should prioritize addressing this vulnerability to mitigate the risk of remote code execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch.load on config-specified cache/covariance files without weights_only=True, bypassing peft's own safe-loading wrapper used elsewhere in the codebase.