CVE-2026-75104
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.
نوع الضعف
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.
المراجع
- https://github.com/huggingface/transformers
- https://github.com/huggingface/transformers/blob/main/src/transformers/utils/hub.py
- https://github.com/huggingface/transformers/issues/47176
- https://github.com/huggingface/transformers/issues/47177
- https://www.vulncheck.com/advisories/hugging-face-transformers-path-traversal-via-checkpoint-index
- https://github.com/huggingface/transformers/issues/47176
اكتشف الثغرة قبل أن يكتشفها المهاجم.
سجّل الدخول عبر GitHub وشغّل أول تدقيق لك في أقل من دقيقة. الخطة المجانية لا تتطلب بطاقة ائتمان.