Vulnerability · Published Aug 17, 2026 · Assigned by VulnCheck
CVE-2026-75104Hugging Face Transformers Path Traversal via Checkpoint Index
Medium 5.5
In plain English
A medium-severity path traversal in transformers from huggingface. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.3%top 78.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| huggingface | transformers | 0 – through 5.15.0 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
References
- GitHub Issue #47176 issue-tracking
- GitHub Issue #47177 issue-tracking
- https://github.com/huggingface/transformers product
- get_checkpoint_shard_files in src/transformers/utils/hub.py technical-description
- VulnCheck Advisory: Hugging Face Transformers Path Traversal via Checkpoint Index third-party-advisory