CyberRota Analysis
AI-GeneratedHugging Face Transformers is vulnerable due to inadequate validation of shard filenames in checkpoint index files, which allows attackers to read arbitrary files outside the model directory. This can lead to file disclosure and potential filesystem reconnaissance, posing a risk to sensitive information. Organizations utilizing Hugging Face Transformers should prioritize addressing this vulnerability to mitigate the risk of unauthorized data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory. Attackers can supply malicious index files with parent-directory references or absolute paths that are joined without validation, enabling file disclosure and filesystem reconnaissance.