CVE-2026-75104

Impact

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/huggingface/transformers
• https://github.com/huggingface/transformers/blob/main/src/transformers/utils/hub.py
• https://github.com/huggingface/transformers/issues/47176
• https://github.com/huggingface/transformers/issues/47177
• https://www.vulncheck.com/advisories/hugging-face-transformers-path-traversal-via-checkpoint-index