File Disclosure Vulnerability in Hugging Face Transformers

CVE-2026-75104

What is CVE-2026-75104?

The Hugging Face Transformers library has a vulnerability that allows attackers to exploit improperly validated shard filenames in checkpoint index files. This flaw enables unauthorized access to arbitrary files outside the model directory. By supplying specially crafted index files containing references to parent directories or absolute paths, attackers can bypass security restrictions, leading to potential file disclosure and filesystem reconnaissance. This situation poses a significant risk as it allows an attacker to gather sensitive information from the host environment.

References