{
 "id": "AIR-2026-0872",
 "slug": "hugging-face-transformers-save-pretrained-allows-arbitrary-f",
 "title": "Hugging Face Transformers save_pretrained allows arbitrary file writes",
 "summary": "A vulnerability in Hugging Face Transformers permits arbitrary file writes via path traversal in chat template names during model saving. Malicious repositories can exploit tokenizer configurations to write files outside intended directories.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "supply_chain"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Transformers"
 ],
 "incident_date": "2026-08-02",
 "incident_date_precision": "day",
 "first_reported": "2026-08-02",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-xrqw-3rrv-vx5w",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-9856: Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",
   "published_at": "2026-08-02"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-9856",
  "transformers",
  "path-traversal"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}