Vulnerability Description
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/huggingface/transformers
- https://github.com/huggingface/transformers/blob/main/src/transformers/utils/hub
- https://github.com/huggingface/transformers/issues/47176
- https://github.com/huggingface/transformers/issues/47177
- https://www.vulncheck.com/advisories/hugging-face-transformers-path-traversal-vi
- https://github.com/huggingface/transformers/issues/47176
FAQ
What is CVE-2026-75104?
CVE-2026-75104 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index file...
How severe is CVE-2026-75104?
CVE-2026-75104 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-75104?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.