Security brief
LightGlue loading flaw could override a caller’s remote-code trust choice
REVIEWCVE-2026-5241 involved nested configuration loading in Transformers, with a fix listed in version 5.5.0.
What happened
A Transformers advisory describes an arbitrary-code-execution path when initializing a LightGlue model from an attacker-controlled repository. Untrusted configuration could supply a remote-code trust value that propagated into nested loading calls.
That could defeat a caller’s explicit choice to disable remote code. The finding concerns the LightGlue loading path and should remain separate from other Transformers checkpoint and custom-generation issues.
The advisory lists versions below 5.5.0 as affected and 5.5.0 as patched. Update to a maintained release and load untrusted model artifacts in an isolated environment with restricted credentials and outbound access.
Next step
Update Transformers and review untrusted LightGlue model-loading workflows.
What we know
- Fixed version
- 5.5.0.
What remains unknown
- Open question
- The sources reviewed do not establish whether your deployment was exploited.
Source references
-
GIT
Technical details
- CVE
CVE-2026-5241