Detections
Analytics

Echo: transformers: security update to 5.10.0

high Tenable Cloud Security Plugin ID 460105

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary
 file writes via path traversal. The issue resides in the `save_pretrained()` methods of
 `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used
 directly as filenames without proper validation. An attacker can exploit this by publishing a malicious
 Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves
 the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling
 arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors
 inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL. (CVE-2026-9856)

Solution

Update the transformers library and its related packages to version 5.10.0 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-9856

Plugin Details

Severity: High

ID: 460105

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/5/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3.5

Percentile: 51.88

CVSS v2

Risk Factor: High

Base Score: 8.5

Temporal Score: 6.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:P

CVSS Score Source: CVE-2026-9856

CVSS v3

Risk Factor: High

Base Score: 7.1

Temporal Score: 6.2

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 9/3/2026

Vulnerability Publication Date: 8/2/2026

Reference Information

CVE: CVE-2026-9856