Hugging Face, the leading AI model and dataset hosting platform, disclosed a significant security breach on July 20,...
Hugging Face, the leading AI model and dataset hosting platform, disclosed a significant security breach on July 20, 2026.
confidence score
Strong evidence: 4 independent source classes support this read.
signal brief
Hugging Face, the leading AI model and dataset hosting platform, disclosed a significant security breach on July 20, 2026. According to a TechCrunch report, internal datasets and service credentials were compromised after an attacker uploaded a malicious dataset that exploited a vulnerability to run code on Hugging Face's servers. The incident was detected by Hugging Face's anomaly detection system, and the company has since revoked stolen credentials and urged users to rotate any keys stored on the platform. Additionally, multiple CVEs (e.g., CVE-2025-3933, CVE-2024-3568) were published on OSV for the Transformers library, highlighting ongoing security challenges. This breach erodes trust in the platform and may accelerate developer ecosystem drift, potentially affecting AI-infra adoption and model deployment pipelines. The incident also underscores the risks of third-party AI agents and the difficulty of securing open platforms in the AI supply chain.
What the sources said:
- TechCrunch: 'Hugging Face confirmed a breach that allowed an attacker to access internal datasets and service credentials via a malicious dataset upload.'
- TechCrunch: 'The company said an external AI agent executed thousands of actions across sandboxes, with self-migrating command-and-control.'
- OSV: 'Transformers is vulnerable to ReDoS attack through its DonutProcessor class (CVE-2025-3933).'
source data used
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, gguf, llama-cpp, gguf-my-repo, text-generation, ko, base_model:kakaocorp/kanana-safeguard-8b, base_model:quantized:kakaocorp/kanana-safeguard-8b, license:apache-2.0, endpoints_compatible, region:us, conversational”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: transformers, pytorch, bert, feature-extraction, license:mit, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: moe, mixture-of-experts, distributed, expert-pool, distmoe, base_model:Qwen/Qwen3.5-35B-A3B, base_model:finetune:Qwen/Qwen3.5-35B-A3B, license:apache-2.0, region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 166 Likes: 0 Tags: sentence-transformers, safetensors, modernbert, feature-extraction, sentence-similarity, transformers, pl, arxiv:2004.09813, arxiv:2412.19048, license:gemma, text-embeddings-inference, endpoints_compatible”
“Downloads: 0 Likes: 0 Tags: peft, safetensors, base_model:adapter:TinyLlama/TinyLlama-1.1B-Chat-v1.0, lora, transformers, text-generation, conversational, base_model:TinyLlama/TinyLlama-1.1B-Chat-v1.0, license:apache-2.0, region:us”
“Downloads: 0 Likes: 3 Tags: transformers, safetensors, generated_from_trainer, trl, sft, base_model:Qwen/Qwen2.5-1.5B-Instruct, base_model:finetune:Qwen/Qwen2.5-1.5B-Instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 6 Tags: endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 98 Likes: 1 Tags: sentence-transformers, safetensors, modernbert, feature-extraction, sentence-similarity, transformers, pl, arxiv:2004.09813, arxiv:2412.19048, license:gemma, text-embeddings-inference, endpoints_compatible”
“Downloads: 0 Likes: 0 Tags: diffusers, safetensors, qwen3_5, region:us”
“Downloads: 0 Likes: 0 Tags: diffusers, text-to-image, lora, template:diffusion-lora, base_model:krea/Krea-2-Turbo, base_model:adapter:krea/Krea-2-Turbo, license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, region:us”
“Downloads: 20 Likes: 0 Tags: license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: text-to-audio, en, base_model:hkchengrex/MMAudio, base_model:finetune:hkchengrex/MMAudio, license:mit, region:us, not-for-all-audiences”
“Downloads: 126 Likes: 1 Tags: sentence-transformers, safetensors, modernbert, feature-extraction, sentence-similarity, transformers, pl, arxiv:2004.09813, arxiv:2412.19048, license:gemma, text-embeddings-inference, endpoints_compatible”
“Downloads: 0 Likes: 0 Tags: pytorch, polymer, molecular-editing, reinforcement-learning, grpo, reproducibility, base_model:HAYDERphd/polyBERT, base_model:finetune:HAYDERphd/polyBERT, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, sft, trl, base_model:Qwen/Qwen2.5-7B-Instruct, base_model:finetune:Qwen/Qwen2.5-7B-Instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, wav2vec2-bert, automatic-speech-recognition, arxiv:1910.09700, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: tensorboard, safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: lerobot, safetensors, act, robotics, dataset:CatGoesMeow/100eps_PickPlace_July20, arxiv:2304.13705, license:apache-2.0, region:us”
“Downloads: 369 Likes: 0 Tags: sentence-transformers, safetensors, modernbert, feature-extraction, sentence-similarity, transformers, pl, arxiv:2004.09813, arxiv:2412.19048, license:gemma, text-embeddings-inference, endpoints_compatible”
“Downloads: 0 Likes: 0 Tags: license:mit, region:us”
“Downloads: 0 Likes: 2 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: gguf, endpoints_compatible, region:us, conversational”
“Downloads: 416 Likes: 0 Tags: sentence-transformers, safetensors, modernbert, feature-extraction, sentence-similarity, transformers, pl, arxiv:2004.09813, arxiv:2412.19048, license:gemma, text-embeddings-inference, endpoints_compatible”
“Downloads: 0 Likes: 0 Tags: calibration, cifar100, resnet50, icml2026-repro, paper-IkPdV0stxX, dataset:uoft-cs/cifar100, license:mit, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, trl, sft, base_model:Qwen/Qwen2.5-7B-Instruct, base_model:finetune:Qwen/Qwen2.5-7B-Instruct, endpoints_compatible, region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 1083 Likes: 7 Tags: sentence-transformers, safetensors, modernbert, feature-extraction, sentence-similarity, transformers, pl, arxiv:2004.09813, arxiv:2412.19048, license:gemma, text-embeddings-inference, endpoints_compatible”
“Downloads: 0 Likes: 3 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: license:other, region:us”
“Downloads: 0 Likes: 0 Tags: safetensors, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, generated_from_trainer, grpo, unsloth, trl, arxiv:2402.03300, base_model:unsloth/Qwen3.5-27B, base_model:finetune:unsloth/Qwen3.5-27B, endpoints_compatible, region:us”
“Downloads: 0 Likes: 0 Tags: lerobot, safetensors, robotics, act, dataset:2usang/record-project-v2, arxiv:2304.13705, license:apache-2.0, region:us”
“Downloads: 0 Likes: 0 Tags: transformers, safetensors, llama, text-generation, generated_from_trainer, grpo, trl, arxiv:2402.03300, base_model:sullivan1502/base-sft, base_model:finetune:sullivan1502/base-sft, text-generation-inference, endpoints_compatible”
“Downloads: 182 Likes: 1 Tags: license:mit, region:us”
“Downloads: 1610 Likes: 0 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: task_categories:robotics, license:apache-2.0, region:us, LeRobot”
“Downloads: 6 Likes: 0 Tags: region:us”
“Downloads: 5848 Likes: 2 Tags: region:us”
“Downloads: 0 Likes: 1 Tags: region:us”
“Downloads: 102616 Likes: 9 Tags: task_categories:video-classification, license:other, modality:video, region:us, youtube, video”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 934 Likes: 1 Tags: region:us”
“Downloads: 1362 Likes: 2 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Downloads: 34860 Likes: 0 Tags: region:us”
“Downloads: 1592 Likes: 1 Tags: task_categories:feature-extraction, language:mr, language:sa, language:en, license:apache-2.0, size_categories:1K<n<10K, format:csv, modality:tabular, modality:text, library:datasets, library:dask, library:polars”
“Downloads: 1232 Likes: 0 Tags: region:us”
“Downloads: 6079 Likes: 7 Tags: license:mit, region:us”
“Downloads: 11738 Likes: 17 Tags: region:us”
“Downloads: 5767 Likes: 4 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: license:apache-2.0, region:us”
“Downloads: 1223 Likes: 1 Tags: region:us”
“Downloads: 21252 Likes: 4 Tags: region:us”
“Downloads: 1076 Likes: 4 Tags: region:us”
“Downloads: 68 Likes: 0 Tags: region:us”
“Downloads: 9018 Likes: 0 Tags: region:us”
“Downloads: 1075 Likes: 1 Tags: region:us”
“Downloads: 0 Likes: 0 Tags: region:us”
“Transformers: the model-definition framework for state-of-the-art machine learning models in text, vision, audio, and multimodal models, for both inference and training.”
“Aliases: CVE-2025-3933, GHSA-37mw-44qp-f5jm Transformers is vulnerable to ReDoS attack through its DonutProcessor class”
“Aliases: CVE-2024-3568, GHSA-37q5-v5qm-c9v8 Transformers Deserialization of Untrusted Data vulnerability”
“Aliases: CVE-2025-3262, GHSA-489j-g2vx-39wf Transformers vulnerable to ReDoS attack through its SETTING_RE variable”
“Aliases: CVE-2025-6921, GHSA-4w7r-h757-3r74 Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer”
“Aliases: CVE-2025-6638, GHSA-59p9-h35m-wg4g Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer”
“Aliases: CVE-2024-12720, GHSA-6rvg-6v2m-4j46 Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-5197, GHSA-9356-575x-2w9m Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-1194, GHSA-fpwr-67px-3qhx Transformers Regular Expression Denial of Service (ReDoS) vulnerability”
“Aliases: CVE-2025-3264, GHSA-jjph-296x-mrcr Transformers vulnerable to ReDoS attack through its get_imports() function”
“Aliases: CVE-2025-3777, GHSA-phhr-52qp-3mj4 Transformers's Improper Input Validation vulnerability can be exploited through username injection”
“Aliases: CVE-2025-3263, GHSA-q2wp-rjmx-x6x9 Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking”
“Aliases: CVE-2025-6051, GHSA-rcv9-qm8p-9p6j Hugging Face Transformers library has Regular Expression Denial of Service”
“Hugging Face, a platform that hosts AI models and datasets, said its internal datasets and service credentials were compromised in a hack last week. The company disclosed the breach on Friday, but said it was still...”
Decision support, not stock advice. This signal is research with cited evidence — not a recommendation to buy, sell, or hold any security.