2024-04 · 2024-Q2
Hugging Face Cross-Tenant Attack
Layer tags: not yet tagged.
Target
Hugging Face shared inference infrastructure
Impact
Cross-tenant access to other customers' AI models via malicious Pickle-serialized model
Root Cause
Insecure deserialization; insufficient tenant isolation in shared inference