CVE-2026-120335

A path traversal vulnerability exists in the Model Package Loader component of deepset-ai farm up to version 0.8.0 . The flaw is located in the WordEmbedding_LM.load function within the file farm/modeling/language_model.py, where manipulation of the embeddings_filename argument allows for unautho...