6.8
Moyenne
CVE-2026-75104 Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read…
Description
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| transformers 5.15 | premières → 5.15.0 | Pas de correctif indiqué |
Références
- GitHub Issue #47176 github.com
- GitHub Issue #47177 github.com
- github.com github.com
- get_checkpoint_shard_files in src/transformers/utils/hub.py github.com
- VulnCheck Advisory: Hugging Face Transformers Path Traversal via Checkpoint Index www.vulncheck.com
Chronologie
- Publiée
- Dernière modification