CVE-2026-75104

Published: Aug 17, 2026Modified: Oct 23, 2026

6.8

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: disclosure@vulncheck.com (Secondary)

Description

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (6)

https://github.com/huggingface/transformers

Source: disclosure@vulncheck.com

https://github.com/huggingface/transformers/blob/main/src/transformers/utils/hub.py

Source: disclosure@vulncheck.com

https://github.com/huggingface/transformers/issues/47176

Source: disclosure@vulncheck.com

https://github.com/huggingface/transformers/issues/47177

Source: disclosure@vulncheck.com

https://www.vulncheck.com/advisories/hugging-face-transformers-path-traversal-via-checkpoint-index

Source: disclosure@vulncheck.com

https://github.com/huggingface/transformers/issues/47176

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.