GHSA-4j2p-28q2-5m79
Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| PyPI | accelerate | <= 1.14.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read arbitrary files, or point shard entries at named pipes to cause indefinite blocking and denial of service.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2026-69112
- https://github.com/huggingface/accelerate/issues/4067
- https://github.com/huggingface/accelerate/pull/4070
- https://github.com/huggingface/accelerate/pull/4138
- https://github.com/huggingface/accelerate
- https://www.vulncheck.com/advisories/hugging-face-accelerate-path-traversal-and-dos-via-weight-map