This model demonstrates a path traversal vulnerability in huggingface_hub's _load_sharded_checkpoint() function.

The model.safetensors.index.json contains a weight_map entry with ../../ path traversal in the shard filename. When loaded, os.path.join() resolves the traversal, allowing reading of arbitrary files outside the model directory.