CVE-2026-120334 deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversal

A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.frompretrained of the file farm/modeling/tokenization.py of the component Tokenizer Loader. Executing a manipulation of the argument vocabfilename can lead to path traversal. The attack may be...

CVE-2026-120334

A path traversal vulnerability exists in deepset-ai farm (versions up to 0.8.0 ) within the Tokenizer Loader component. The flaw specifically affects the EmbeddingTokenizer.from_pretrained function in the farm/modeling/tokenization.py file. An attacker can manipulate the vocab_filename argument t...

CVE-2026-120334: deepset-ai farm: A flaw has been found in deepset-ai farm up to 0.8.0

A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.frompretrained of the file farm/modeling/tokenization.py of the component Tokenizer Loader. Executing a manipulation of the argument vocabfilename can lead to path traversal. The attack may be...