CVE-2026-71281

HIGH 8.8

peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch.load() on config-specified cache/covariance files without weights_only=True, bypassing peft's own safe-loading wrapper used elsewhere in the codebase. Because torch.load() without weights_only=True performs full pickle deserialization, loading a malicious cache or covariance file (e.g. a shared/downloaded LoRA-GA or CorDA cache) results in arbitrary code execution.

CWE	CWE-502
Vendor	huggingface
Product	peft
Published	Aug 5, 2026
Last Updated	Aug 5, 2026

Stay Ahead of the Next One

Get instant alerts for huggingface peft

Be the first to know when new high vulnerabilities affecting huggingface peft are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

huggingface / peft

0 ≤ 0.19.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/huggingface/peft github.com: https://github.com/huggingface/peft/blob/main/src/peft/tuners/lora/corda.py

Credits

Saidakbarxon Maxsudxonov