PT-2026-126637

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load pretrained gr00t of the file dexbotic/model/gr00tsonic/gr00tsonic arch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weight map causes path traversal...

PT-2026-120165

A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extract mtp heads of the file qwen-mtp-gguf/scripts/qwen mtp gguf pipeline.py of the component MTP weight map Handler. The manipulation ...

PT-2026-120164

A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validate indexed tensors of the file qwen-mtp-gguf/scripts/qwen mtp gguf pipeline.py. Executing a manipulation of the argument weight map can lead to path...

CVE-2026-65920

A flaw was found in Diffusers. This path traversal vulnerability in the getcheckpointshardfiles function allows a remote attacker to read arbitrary files. By supplying malicious weightmap values in model index JSON, an attacker can use ../ sequences or absolute paths to escape the model directory...

Directory Traversal

Overview diffusers is a State-of-the-art diffusion in PyTorch and JAX. Affected versions of this package are vulnerable to Directory Traversal via the getcheckpointshardfiles function. An attacker can access arbitrary files by providing crafted weightmap values containing directory traversal...

CVE-2026-65920

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the getcheckpointshardfiles function that allows attackers to read arbitrary files by supplying malicious weightmap values in model index JSON. Attackers can use ../ sequences or absolute paths in...

CVE-2026-65920

Diffusers up to 0.39.0 is affected by a path traversal in the _get_checkpoint_shard_files function. Attackers can supply malicious weight_map values in the model index JSON (e.g., ../ sequences or absolute paths) to escape the model directory and read safetensors files outside the intended locati...

CVE-2026-65920

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the getcheckpointshardfiles function that allows attackers to read arbitrary files by supplying malicious weightmap values in model index JSON. Attackers can use ../ sequences or absolute paths in...

CVE-2026-65920 Diffusers Path Traversal via weight_map Arbitrary File Read

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the getcheckpointshardfiles function that allows attackers to read arbitrary files by supplying malicious weightmap values in model index JSON. Attackers can use ../ sequences or absolute paths in...

EUVD-2026-48343

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the getcheckpointshardfiles function that allows attackers to read arbitrary files by supplying malicious weightmap values in model index JSON. Attackers can use ../ sequences or absolute paths in...

CVE-2026-65920 Diffusers Path Traversal via weight_map Arbitrary File Read

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the getcheckpointshardfiles function that allows attackers to read arbitrary files by supplying malicious weightmap values in model index JSON. Attackers can use ../ sequences or absolute paths in...

CVE-2026-65920 Diffusers Path Traversal via weight_map Arbitrary File Read

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the getcheckpointshardfiles function that allows attackers to read arbitrary files by supplying malicious weightmap values in model index JSON. Attackers can use ../ sequences or absolute paths in...

PT-2026-64045

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the get checkpoint shard files function that allows attackers to read arbitrary files by supplying malicious weight map values in model index JSON. Attackers can use ../ sequences or absolute paths in...