CVE-2026-75104

Hugging Face Transformers joins shard filenames from checkpoint index files without validation, allowing malicious index files with parent-directory references or absolute paths to read arbitrary files outside the model directory. CVSS 6.8 (medium) requires local access and user interaction. No p...

EUVD-2026-60384

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling...

CVE-2026-75104 Hugging Face Transformers Path Traversal via Checkpoint Index

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling...

PT-2026-76799

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers affected versions not specified Description The software fails to validate shard filenames within checkpoint index files. This allows an attacker to read arbitrary files outside the model directory by providing...

CVE-2026-75104: Improper Limitation of a Pathname to a Restricted Directory

Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling...

PT-2026-76425

These are all security issues fixed in the python313-transformers-5.15.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11499-1 python313-transformers-5.15.0-1.1 on GA media

These are all security issues fixed in the python313-transformers-5.15.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-68770

A flaw was found in sentence-transformers. A remote attacker could exploit a logic flaw to bypass a security control designed to prevent the execution of untrusted code. This vulnerability allows for arbitrary code execution when an application loads a model from a directory that has been...

ROOT-APP-PYPI-CVE-2026-68770 CVE-2026-68770 in sentence-transformers - Patched by Root

Root has patched CVE-2026-68770 in the sentence-transformers package for Root:PyPI. Multiple fixed versions available...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-5241

Summary IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-5241, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-5241 DESCRIPTION: A vulnerability in the LightGlue...

MAL-2026-11593 Malicious code in @onereach/channel-transformers (npm)

npm/@onereach/channel-transformers is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

CLSA-2026-1783991041 TuxCare security update for transformers (1 CVE)

TuxCare rebuilt transformers to address 1 CVE. Fixed in 4.57.6.post3+tuxcare...

CLSA-2026-1783386115 TuxCare security update for transformers (1 CVE)

TuxCare rebuilt transformers to address 1 CVE. Fixed in 4.57.6.post2+tuxcare...

CLSA-2026-1779065183 TuxCare security update for transformers (1 CVE)

TuxCare rebuilt transformers to address 1 CVE. Fixed in 4.57.6.post1+tuxcare...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-1839,CVE-2025-14920, CVE-2026-4372

Summary IBM Maximo Application Suite - Visual Inspection component uses transformers which is vulnerable to CVE-2026-1839,CVE-2025-14920,CVE-2026-4372. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2025-14920 DESCRIPTION: Huggi...

Transformers save_pretrained path traversal allows arbitrary file writes through chat template names

A vulnerability in huggingface/transformers versions 5.10.0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the savepretrained methods of PreTrainedTokenizerBase and ProcessorMixin, where keys from the chattemplate dictionary are used directly as...

GHSA-XRQW-3RRV-VX5W Transformers save_pretrained path traversal allows arbitrary file writes through chat template names

A vulnerability in huggingface/transformers versions 5.10.0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the savepretrained methods of PreTrainedTokenizerBase and ProcessorMixin, where keys from the chattemplate dictionary are used directly as...

Directory Traversal

Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Directory Traversal in the savepretrained methods of PreTrainedTokenizerBase and ProcessorMixin, which build each chat template's output path by joining...

EUVD-2026-52005

A vulnerability in huggingface/transformers versions =5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the savepretrained methods of PreTrainedTokenizerBase and ProcessorMixin, where keys from the chattemplate dictionary are used directly as...

CVE-2026-9856 Path Traversal in huggingface/transformers

A vulnerability in huggingface/transformers versions =5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the savepretrained methods of PreTrainedTokenizerBase and ProcessorMixin, where keys from the chattemplate dictionary are used directly as...