21 matches found
Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
7.1CVSS5.9AI score0.00148EPSS
SaveExploits0References8Affected Software1
20