Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration. The issue is fixed in version 4.52.1.

Metrics

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Huggingface
  • Transformers

Configuration 1 [-]

cpe:2.3:a:huggingface:transformers:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://github.com/huggingface/transformers/commit/4dda5f71b35fb70cf602187eef84bb17a50b9082 cve-icon cve-icon cve-icon
https://huntr.com/bounties/ccba0730-9248-4853-b7ff-5c20e6364f09 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-3777 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-3777 cve-icon
History

Thu, 07 Aug 2025 01:00:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:huggingface:transformers:*:*:*:*:*:*:*:*

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00059}

 epss

{'score': 0.0006}

Tue, 08 Jul 2025 00:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Low

Mon, 07 Jul 2025 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 07 Jul 2025 10:00:00 +0000

Type Values Removed Values Added
Description Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration. The issue is fixed in version 4.52.1.
Title Improper Input Validation in huggingface/transformers
Weaknesses CWE-20
References
Metrics cvssV3_0

{'score': 3.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: @huntr_ai

Published: 2025-07-07T09:55:38.190Z

Updated: 2025-07-07T12:26:15.099Z

Reserved: 2025-04-17T17:35:27.010Z

Link: CVE-2025-3777

cve-icon Vulnrichment

Updated: 2025-07-07T12:25:20.710Z

cve-icon NVD

Status : Analyzed

Published: 2025-07-07T10:15:28.297

Modified: 2025-08-07T00:54:16.957

Link: CVE-2025-3777

cve-icon Redhat

Severity : Low

Publid Date: 2025-07-07T09:55:38Z

Links: CVE-2025-3777 - Bugzilla