CVE-2026-120335

A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbeddingLM.load of the file farm/modeling/languagemodel.py of the component Model Package Loader. The manipulation of the argument embeddingsfilename leads to path traversal. An attack has to be approache...

CVE-2026-120335

A path traversal vulnerability exists in the Model Package Loader component of deepset-ai farm up to version 0.8.0 . The flaw is located in the WordEmbedding_LM.load function within the file farm/modeling/language_model.py, where manipulation of the embeddings_filename argument allows for unautho...

CVE-2026-120335 deepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversal

A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbeddingLM.load of the file farm/modeling/languagemodel.py of the component Model Package Loader. The manipulation of the argument embeddingsfilename leads to path traversal. An attack has to be approache...

EUVD-2026-115059

A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbeddingLM.load of the file farm/modeling/languagemodel.py of the component Model Package Loader. The manipulation of the argument embeddingsfilename leads to path traversal. An attack has to be approache...

CVE-2026-120335: deepset-ai farm: A vulnerability has been found in deepset-ai farm up to 0.8.0

A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbeddingLM.load of the file farm/modeling/languagemodel.py of the component Model Package Loader. The manipulation of the argument embeddingsfilename leads to path traversal. An attack has to be approache...