7 matches found
Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
CVE-2026-69112
A flaw was found in Hugging Face Accelerate. This path traversal vulnerability exists in the loadcheckpointinmodel and loadcheckpointanddispatch functions due to a failure to sanitize weightmap entries from sharded checkpoint indexes. An attacker can exploit this by supplying relative paths with...
GHSA-4J2P-28Q2-5M79 Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
CVE-2026-69112
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
CVE-2026-69112 Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
CVE-2026-69112
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
CVE-2026-69112 Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...