CVE-2026-75104
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.
취약점 유형
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.
참고 자료
- https://github.com/huggingface/transformers
- https://github.com/huggingface/transformers/blob/main/src/transformers/utils/hub.py
- https://github.com/huggingface/transformers/issues/47176
- https://github.com/huggingface/transformers/issues/47177
- https://www.vulncheck.com/advisories/hugging-face-transformers-path-traversal-via-checkpoint-index
- https://github.com/huggingface/transformers/issues/47176
공격자보다 먼저 취약점을 찾으세요.
GitHub로 로그인하고 1분 안에 첫 감사를 실행하세요. 무료 플랜은 신용카드가 필요 없습니다.