HIGH7.1
GHSA-4j2p-28q2-5m79
Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
Details
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read arbitrary files, or point shard entries at named pipes to cause indefinite blocking and denial of service.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/accelerate
Introduced in:
0No fixed version published yet for accelerate (pip). Pin to a known-safe version or switch to an alternative.
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-69112[ADVISORY]
- https://github.com/huggingface/accelerate/issues/4067[WEB]
- https://github.com/huggingface/accelerate/pull/4070[WEB]
- https://github.com/huggingface/accelerate/pull/4138[WEB]
- https://github.com/huggingface/accelerate[PACKAGE]
- https://www.vulncheck.com/advisories/hugging-face-accelerate-path-traversal-and-dos-via-weight-map[WEB]