CVE-2026-75104

Description

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.

References

https://www.vulncheck.com/advisories/hugging-face-transformers-path-traversal-via-checkpoint-index

https://github.com/huggingface/transformers/issues/47177

https://github.com/huggingface/transformers/issues/47176

https://github.com/huggingface/transformers/blob/main/src/transformers/utils/hub.py

https://github.com/huggingface/transformers

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4