CVE-2026-124589

A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects the function loadstatedictintomodel of the file omgllava/xtuner/utils/handlemoeloadandsave.py of the component MoE Shard Checkpoint Loader. Executing a manipulation of the argument weightm...

CVE-2026-124589

A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects the function loadstatedictintomodel of the file omgllava/xtuner/utils/handlemoeloadandsave.py of the component MoE Shard Checkpoint Loader. Executing a manipulation of the argument weightm...

CVE-2026-124589

A path traversal vulnerability exists in the lxtGH OMG-Seg software (up to commit f3b26b609bae919760cd3ccf09c36179bb8624a0). The flaw is located in the MoE Shard Checkpoint Loader component, specifically within the load_state_dict_into_model function of the file omg_llava/xtuner/utils/handle_moe_...

EUVD-2026-119924

A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects the function loadstatedictintomodel of the file omgllava/xtuner/utils/handlemoeloadandsave.py of the component MoE Shard Checkpoint Loader. Executing a manipulation of the argument weightm...

CVE-2026-124589 lxtGH OMG-Seg MoE Shard Checkpoint Loader handle_moe_load_and_save.py load_state_dict_into_model path traversal

A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects the function loadstatedictintomodel of the file omgllava/xtuner/utils/handlemoeloadandsave.py of the component MoE Shard Checkpoint Loader. Executing a manipulation of the argument weightm...

CVE-2026-124589 lxtGH OMG-Seg MoE Shard Checkpoint Loader handle_moe_load_and_save.py load_state_dict_into_model path traversal

A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects the function loadstatedictintomodel of the file omgllava/xtuner/utils/handlemoeloadandsave.py of the component MoE Shard Checkpoint Loader. Executing a manipulation of the argument weightm...

PT-2026-140349

A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects the function load state dict into model of the file omg llava/xtuner/utils/handle moe load and save.py of the component MoE Shard Checkpoint Loader. Executing a manipulation of the argumen...

CVE-2026-124589: lxtGH OMG-Seg: A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0

A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects the function loadstatedictintomodel of the file omgllava/xtuner/utils/handlemoeloadandsave.py of the component MoE Shard Checkpoint Loader. Executing a manipulation of the argument weightm...

CVE-2026-117510

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

CVE-2026-117510 Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

EUVD-2026-111084

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

CVE-2026-117510

A path traversal vulnerability exists in Dexmal Dexbotic up to version 0.2.0 . The flaw is located within the load_pretrained_gr00t function of the gr00tsonic_arch.py file in the gr00tsonic Checkpoint Loader component. By manipulating the weight_map argument, an attacker can perform a path traver...

CVE-2026-117510

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

CVE-2026-117510 Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

CVE-2026-117510 Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

CVE-2026-117510: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

Dexmal One-Stop VLA Development Toolbox for Embodied Intelligence path traversal vulnerability

Versions 0.2.0 and earlier of the Dexmal One-Stop VLA Development Toolbox for Embodied Intelligence contain a path traversal vulnerability. This vulnerability stems from improper handling of the parameter weightmap in the loadpretrainedgr00t function within the file...

PT-2026-126637

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load pretrained gr00t of the file dexbotic/model/gr00tsonic/gr00tsonic arch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weight map causes path traversal...

EUVD-2026-55743

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...

MONAI: Unsafe torch usage may lead to arbitrary code execution

Summary In modeldict = torch.loadfullpath, maplocation=torch.devicedevice, weightsonly=True in monai/bundle/scripts.py , weightsonly=True is loaded securely. However, insecure loading methods still exist elsewhere in the project, such as when loading checkpoints. This is a common practice when...