{"id":"CVE-2026-65010","title":"Datasets Symlink-following Arbitrary File Write via Extractor.extract()","summary":"Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can re…","severity":"medium","cvss":6.6,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","cvssSource":"cna","cwe":["CWE-61"],"vendor":"huggingface","product":"datasets","affected":["datasets <= 5.00"],"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-07-23T19:09:45.573671Z"},"exploitAvailable":true,"published":"2026-07-23","updated":"2026-10-01","sourceUpdated":"2026-10-01T15:20:14.218Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-65010","references":[{"url":"https://github.com/huggingface/datasets/issues/8296","label":"Researcher Disclosure"},{"url":"https://github.com/huggingface/datasets/pull/8303","label":"Pull Request"},{"url":"https://github.com/huggingface/datasets/commit/ad2d853ae2ce41d8068c23b44c2e29004312ccee","label":"Patch Commit"},{"url":"https://www.vulncheck.com/advisories/datasets-symlink-following-arbitrary-file-write-via-extractor-extract"}],"tags":["cve.org","exploit-available"],"epss":0.00173,"epssPercentile":0.05996,"ingestedAt":"2026-10-01T15:48:17.859Z","slug":"CVE-2026-65010","body":"## Overview\n\nDatasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can redirect archive extraction to arbitrary filesystem locations in shared-cache environments, enabling overwrite of sensitive files and potential privilege escalation or code execution.\n\n## Affected\n\n- `datasets <= 5.00`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":36.3,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[]}