CVE-2026-75104

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers (affected versions not specified)

Description The software fails to validate shard filenames within checkpoint index files. This allows an attacker to read arbitrary files outside the model directory by providing malicious index files containing absolute paths or parent-directory references, which are joined without proper validation. This flaw enables file disclosure and filesystem reconnaissance.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.