CVE-2025-3777
published 2025-07-07CVE-2025-3777: Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability…
PriorityP415low3.5CVSS 3.0
AVNACLPRLUIRSUCLINAN
EPSS
0.33%
24.7th percentile
Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration. The issue is fixed in version 4.52.1.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huggingface | huggingface_transformers | >= unspecified < 4.52.1 | 4.52.1 |
| huggingface | transformers | < 4.52.1 | 4.52.1 |
| huggingface | transformers | >= 0 < 4.52.1 | 4.52.1 |
CVSS provenance
nvdv3.03.5LOWCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
vendor_redhat3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Transformers's Improper Input Validation vulnerability can be exploited through username injection
ghsa·2025-07-07
CVE-2025-3777 [LOW] CWE-20 Transformers's Improper Input Validation vulnerability can be exploited through username injection
Transformers's Improper Input Validation vulnerability can be exploited through username injection
Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration. The issue is fixed in version 4.52.1.
OSV
Transformers's Improper Input Validation vulnerability can be exploited through username injection
osv·2025-07-07
CVE-2025-3777 [LOW] Transformers's Improper Input Validation vulnerability can be exploited through username injection
Transformers's Improper Input Validation vulnerability can be exploited through username injection
Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration. The issue is fixed in version 4.52.1.
Red Hat
transformers: Improper Input Validation in huggingface/transformers
vendor_redhat·2025-07-07·CVSS 3.5
CVE-2025-3777 [LOW] CWE-20 transformers: Improper Input Validation in huggingface/transformers
transformers: Improper Input Validation in huggingface/transformers
Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration. The issue is fixed in version 4.52.1.
An input validation flaw has been discovered in the Hugging Face Transformers library. Given an attacker can feed in a url, an application using the transformers library may present what appears to be a YouTube link, but actuall
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-07-07
Published