CVE-2026-75104
Hugging Face Transformers Path Traversal via Checkpoint Index
- State
- Published
- Severity
- 6.8 Medium
- Published
- Aug 17, 2026
- Updated
- Sep 24, 2026
- Reserved
- Aug 17, 2026
Description
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N | VulnCheck |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
transformershuggingface |
|
References
- GitHub Issue #47176issue-tracking
- GitHub Issue #47177issue-tracking
- https://github.com/huggingface/transformersproduct
- get_checkpoint_shard_files in src/transformers/utils/hub.pytechnical-description
- VulnCheck Advisory: Hugging Face Transformers Path Traversal via Checkpoint Indexthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.