CVE
CVE-2026-4372
- First Reported
- Jul 21, 2026
- Latest Reported
- Jul 21, 2026
Reported Context (1)
- moment you load something from a source you do not fully trust. In June 2026 Pluto Security disclosed CVE-2026-4372, a config injection in Transformers that ran attacker code on a routine from_pretrained() call even Hugging Face Breach Highlights Detection Paths for AI-Agent Intrusions
MITRE ATT&CK (3)
Vendors (5)
Products (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.