Directory Traversal

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Directory Traversal in the savepretrained methods of PreTrainedTokenizerBase and ProcessorMixin, which build each chat template's output path by joining...

CVE-2026-9856

A vulnerability in huggingface/transformers versions =5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the "savepretrained" methods of "PreTrainedTokenizerBase" and "ProcessorMixin", where keys from the "chattemplate" dictionary are used...

CVE-2026-9856: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in huggingface/transformers versions =5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the savepretrained methods of PreTrainedTokenizerBase and ProcessorMixin, where keys from the chattemplate dictionary are used directly as...