Hugging Face Transformers File Disclosure via Shard Path Traversal

Executive Summary

Hugging Face Transformers does not properly check shard filenames in checkpoint index files. Attackers can create malicious index files with paths that reference parent directories or absolute paths. When processed, these paths allow reading arbitrary files outside the intended model directory, leading to unauthorized file access and potential system reconnaissance.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow attackers to access sensitive files on your system, including configuration files, source code, or other confidential data stored outside the model directory. If you use Hugging Face Transformers in your environment, an attacker might exploit this to steal information or map your filesystem for further attacks.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access, potentially violating GDPR (data protection) or HIPAA (health information privacy) by exposing personal or sensitive data. Organizations using affected versions may face compliance breaches, legal penalties, or reputational damage if exploited.

Useful 0 Not Useful 0

Mitigation Strategies

Review and validate all checkpoint index files in Hugging Face Transformers to ensure they do not contain malicious shard filenames with parent-directory references or absolute paths. Remove any untrusted or suspicious index files.

Useful 0 Not Useful 0