Security brief

Transformers downloaded custom-generation code before asking for trust consent

REVIEW

CVE-2026-80047 concerns a premature cache write; the advisory explicitly distinguishes downloading code from executing it.

Published 29 Oct 2026 · Material update 1 Sep 2026 — last time the underlying evidence changed · Evidence: high

What happened

The Transformers advisory describes load_custom_generate fetching a remote Python module before checking remote-code trust consent. The file could remain in the local module cache even when the user declined the prompt.

The advisory says execution was correctly gated in that path. The immediate finding is unauthorized file placement and persistence, with potential later cache-related consequences, rather than proof that declining consent immediately executed the module.

The listed affected range is 4.49.0 through 5.8.1, and the advisory does not list a patched release. Consult the linked upstream discussion before choosing a remediation, avoid untrusted custom-generation sources and isolate model caches used by sensitive workflows.

Read the original source.

Next step

Review upstream guidance and isolate untrusted custom-generation downloads and caches.

What we know

Patched release in advisory: None listed.

What remains unknown

Open question: The sources reviewed do not establish whether your deployment was exploited.

Source references

GIT

github.com Transformers downloaded custom-generation code before asking for trust consent

Technical details

CVE: CVE-2026-80047