CVE-2024-3924 json
Code Injection in huggingface/text-generation-inference
published 2024-05-30 2 y ago modified 2026-07-07 4 mo ago also GHSA-qq99-p57r-g3v7 , PYSEC-2026-1966 , EUVD-2024-2148
- cvss
- 4.4
- version 3.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 25%
- public exploits
- 0
- none known
Summary
A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the `autodocs.yml` workflow file. The vulnerability arises from the insecure handling of the `github.head_ref` user input, which is used to dynamically construct a command for installing a software package. An attacker can exploit this by forking the repository, creating a branch with a malicious payload as the name, and then opening a pull request to the base repository. Successful exploitation could lead to arbitrary code execution within the context of the GitHub Actions runner. This issue affects versions up to and including v2.0.0 and was fixed in version 2.0.0.
Patch / fix
- pypi text-generation 2.0.0
- huggingface huggingface/text-generation-inference 2.0.0
- huggingface text_generation_inference 2.0.0
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.32% chance of exploitation in the next 30 days, higher than 25% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.0 | 4.4 | CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N |
| GitHub | 3.0 | 4.4 | CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N |
| OSV | 3.0 | 4.4 | CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | text-generation | <2.0.0 |
2.0.0 |
Affected products
- huggingface huggingface/text-generation-inference
- huggingface text_generation_inference
Classification
- Weakness
-
- CWE-94 Improper Control of Generation of Code
References
-
github.com
/huggingface/text-generation-inference/commit/88702d876383f7200eccf67e28ba00500dc804bb
web
-
huntr.com
/bounties/8af92fc2-0103-4d29-bb28-c3893154c422
web
-
nvd.nist.gov
/vuln/detail/CVE-2024-3924
advisory
-
github.com
/huggingface/text-generation-inference
package
-
pypi.org
/project/text-generation
package
-
github.com
/advisories/GHSA-qq99-p57r-g3v7
advisory
Sources
- CVE List CVE-2024-3924
- GitHub Advisory GHSA-qq99-p57r-g3v7
- NVD CVE-2024-3924
- OSV PYSEC-2026-1966
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.