CVE-2026-71281 Details
Description
Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch.load on config-specified cache/covariance files without weights_only=True, bypassing peft's own safe-loading wrapper used elsewhere in the codebase.
A vulnerability in the Hugging Face PEFT library's LoRA-GA and CorDA initialization modules allows for arbitrary code execution. This issue arises because these modules call torch.load() on cache or covariance files without using the weights_only=True option. As a result, the full pickle deserialization process is executed, creating an opportunity for malicious code to be executed. The vulnerability is present in versions of the PEFT library prior to 0.20.0.
Users can update to PEFT version 0.20.0 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Aug 5, 2026CISA-ADP
Assessed Aug 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/huggingface/peft | TuranSec | Vendor |
| https://github.com/huggingface/peft/blob/main/src/peft/tuners/lora/corda.py | TuranSec | Source CodeVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | TuranSec |
Affected Products
| Product | Versions |
|---|---|
| Hugging Face peft | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 10, 2026 | CVE Modified | TuranSec |
| Aug 5, 2026 | CVE Modified | CISA-ADP |
| Aug 5, 2026 | New CVE Received | TuranSec |