VULNRABLE / Vulnerability / CVE-2025-14928

CVE-2025-14928

UNKNOWN LOW transformers OSV

Exploit verdict: No active-exploit signal

CVSS Score

—

Severity

UNKNOWN

EPSS

Source

OSV

Summary

Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e...

What this means

CVE-2025-14928 is a unknown-severity vulnerability affecting transformers. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published December 24, 2025.

View full advisory at OSV →