CVE-2026-117510

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

EUVD-2026-111084

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

CVE-2026-117510

A path traversal vulnerability exists in Dexmal Dexbotic up to version 0.2.0 . The flaw is located within the load_pretrained_gr00t function of the gr00tsonic_arch.py file in the gr00tsonic Checkpoint Loader component. By manipulating the weight_map argument, an attacker can perform a path traver...

CVE-2026-117510 Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

CVE-2026-117510 Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

Dexmal One-Stop VLA Development Toolbox for Embodied Intelligence path traversal vulnerability

Versions 0.2.0 and earlier of the Dexmal One-Stop VLA Development Toolbox for Embodied Intelligence contain a path traversal vulnerability. This vulnerability stems from improper handling of the parameter weightmap in the loadpretrainedgr00t function within the file...

CVE-2026-117510: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function loadpretrainedgr00t of the file dexbotic/model/gr00tsonic/gr00tsonicarch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weightmap causes path traversal. Remote...

CVE-2026-113738

A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extractmtpheads of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py of the component MTP weightmap Handler. The manipulation of the...

CVE-2026-113743 Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function loadhfstatedictfiltered of the file models/tttransformers/tt/loadcheckpoints.py. This manipulation of the argument weightmap causes path traversal. The attack may be initiated remotely. The...

CVE-2026-113743 Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function loadhfstatedictfiltered of the file models/tttransformers/tt/loadcheckpoints.py. This manipulation of the argument weightmap causes path traversal. The attack may be initiated remotely. The...

CVE-2026-113743 Tenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal

A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function loadhfstatedictfiltered of the file models/tttransformers/tt/loadcheckpoints.py. This manipulation of the argument weightmap causes path traversal. The attack may be initiated remotely. The...

CVE-2026-113743

Tenstorrent tt-metal versions up to 0.80.0 are vulnerable to a path traversal issue within the load_hf_state_dict_filtered function of models/tt_transformers/tt/load_checkpoints.py. The vulnerability is caused by the improper manipulation of the weight_map argument, which could allow an attacker ...

CVE-2026-113738 R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversal

A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extractmtpheads of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py of the component MTP weightmap Handler. The manipulation of the...

CVE-2026-113738 R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversal

A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extractmtpheads of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py of the component MTP weightmap Handler. The manipulation of the...

CVE-2026-113738 R6410418 Jackrong-llm-finetuning-guide MTP weight_map qwen_mtp_gguf_pipeline.py extract_mtp_heads path traversal

A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extractmtpheads of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py of the component MTP weightmap Handler. The manipulation of the...

EUVD-2026-106991

A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extractmtpheads of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py of the component MTP weightmap Handler. The manipulation of the...

CVE-2026-113738

A path traversal vulnerability exists in the R6410418 Jackrong-llm-finetuning-guide (up to commit ef2b17f2798cd18cd85375080c35a58397ad0d09). The flaw is located in the extract_mtp_heads function within the qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py file, specifically affecting the MTP weight...

Jackrong LLM Fine-Tuning Guide path traversal vulnerability

The Jackrong LLM Fine-Tuning Guide contains a path traversal vulnerability. This vulnerability stems from improper handling of the weightmap parameter within the validateindexedtensors function in the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py, potentially allowing remote attackers to...

Tenstorrent AI tt-metal path traversal vulnerability

Tenstorrent AI tt-metal versions 0.80.0 and earlier contain a path traversal vulnerability. This vulnerability stems from the operation performed by the loadhfstatedictfiltered function in models/tttransformers/tt/loadcheckpoints.py on the parameter weightmap, potentially enabling path traversal...

Accelerate path traversal and denial of service via sharded checkpoint weight_map entries

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...