Skip to content
OpenAdvisories

Product · huggingface

transformers

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-75104

    Hugging Face Transformers Path Traversal via Checkpoint Index

    Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that a…

    huggingface transformers