CVE-2026-75104CWE-22path-traversal

CVE-2026-75104

Medium · published August 18, 2026

CVSS v3.1

5.5

EPSS

Percentile

20.1

In the wild

Unconfirmed

What it is

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.

The record

Technical detail

CVSS v3.1: 5.5 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0: 6.8 · CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00286 · 20.1th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2026-08-18T01:16Z

References (6)

https://github.com/huggingface/transformers · [email protected]https://github.com/huggingface/transformers/blob/main/src/transformers/utils/hub.py · [email protected]https://github.com/huggingface/transformers/issues/47176 · [email protected]https://github.com/huggingface/transformers/issues/47177 · [email protected]https://www.vulncheck.com/advisories/hugging-face-transformers-path-traversal-via-checkpoint-index · [email protected]https://github.com/huggingface/transformers/issues/47176 · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

17 AUG 20:36Z
Hugging Face Transformers Path Traversal via Checkpoint Index
cvelistv5