CVE-2026-75104 — Hugging Face Transformers Path Traversal via Checkpoint Index
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supp…
Published: 2026-08-17 · CVSS: 6.8 · CVSS 4.0
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7