A path traversal vulnerability in huggingface/transformers versions prior to 5.10.0 presents a high risk of unauthorized file system interaction.

This is a path traversal vulnerability (CWE-22) resulting from improper limitation of a pathname to a restricted directory. The vulnerability is network-exploitable and requires user interaction, but it does not require authentication to trigger.

The CVSS score of 7.1 reflects a high severity, as successful exploitation could lead to unauthorized file access or modification. This could compromise the integrity of the machine learning environment or allow for the exfiltration of sensitive model weights or training data.

Immediate Action: Update the huggingface/transformers library to version 5.10.0 or later.

Proactive Monitoring: Monitor file system access logs for suspicious path traversal attempts, such as requests containing directory climbing sequences.

Compensating Controls: Ensure the application is running with the principle of least privilege, restricting the container or process access to only necessary directories.

Public Exploit Available: No

Users of the huggingface/transformers library should prioritize upgrading to version 5.10.0 to remediate this path traversal risk. Failure to patch may expose the underlying host or container environment to unauthorized file system access.