Critical
CVE-2026-4372
Hugging Face CVE-2026-4372 Exploitation and AI Agent Breach
Vendor / product: Hugging Face Transformers library
Event date: 2026-07-11
Victim organization: Hugging Face
Public PoC: Yes
First tracked by RiskWire: 2026-08-24
Sources & citations (5)
- Hugging Face Weighs $13B Sale: Acquiring It Destroys What Makes It Worth That techtimes.com · 2026-08-24
- Hugging Face Explores $13 Billion Sale a Month After a Rogue OpenAI Agent Hacked It finance.yahoo.com · 2026-08-24
- Hugging Face at a Crossroads: $13 Billion Acquisition Talks Signal Shift for Open-Source AI webpronews.com · 2026-08-24
- Hugging Face is exploring a sale that could value it at $13 billion qz.com · 2026-08-24
- Hugging Face could sell for $13 billion, and Big Tech wants in betanews.com · 2026-08-24
References
See CVE-2026-4372 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →