{"id":"CVE-2026-69112","title":"Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes","summary":"Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes. Attackers can…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","cwe":["CWE-22"],"vendor":"accelerate","product":"accelerate","affected":["accelerate <= 1.14.0"],"patched":["openshift_ai 2.25"],"published":"2026-08-10","updated":"2026-09-16","sourceUpdated":"2026-09-16T20:32:21.400","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69112","references":[{"url":"https://github.com/huggingface/accelerate/issues/4067","label":"disclosure@vulncheck.com"},{"url":"https://github.com/huggingface/accelerate/pull/4070","label":"disclosure@vulncheck.com"},{"url":"https://github.com/huggingface/accelerate/pull/4138","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/hugging-face-accelerate-path-traversal-and-dos-via-weight-map","label":"disclosure@vulncheck.com"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69112"},{"url":"https://github.com/huggingface/accelerate"},{"url":"https://pypi.org/project/accelerate"},{"url":"https://github.com/advisories/GHSA-4j2p-28q2-5m79"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69112.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-69112"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513620"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69112"},{"url":"https://access.redhat.com/errata/RHSA-2026:65126"}],"tags":["nvd","osv","pip","csaf","vex","red-hat","ghsa"],"epss":0.00148,"epssPercentile":0.04377,"aliases":["GHSA-4j2p-28q2-5m79","PYSEC-2026-3804"],"ecosystem":"pip","ingestedAt":"2026-09-08T19:08:49.634Z","slug":"CVE-2026-69112","body":"## Overview\n\nHugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read arbitrary files, or point shard entries at named pipes to cause indefinite blocking and denial of service.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-69112)\n\nAffected packages:\n\n- `accelerate <= 1.14.0`\n\nPatched in:\n\n- `openshift_ai 2.25`\n\nSource: https://osv.dev/vulnerability/GHSA-4j2p-28q2-5m79\n\n## Vendor advisories\n\n- **RHSA-2026:65126** · Red Hat · fixed in: Red Hat OpenShift AI 2.25 · released 2026-09-08 · [advisory](https://access.redhat.com/errata/RHSA-2026:65126)\n- **Red Hat VEX** · Important · affected: Lightspeed Core, Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI) · no fix planned: Red Hat AI Inference Server, Red Hat OpenShift AI (RHOAI), Lightspeed Core, Red Hat Enterprise Linux AI (RHEL AI) 3 · updated 2026-09-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69112.json)","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":201871,"id":"CVE-2026-69112","ts":1789399943427,"field":"severity","old":"medium","new":"high"},{"seq":200601,"id":"CVE-2026-69112","ts":1789397466222,"field":"severity","old":"high","new":"medium"},{"seq":198518,"id":"CVE-2026-69112","ts":1789392057647,"field":"severity","old":"medium","new":"high"},{"seq":196309,"id":"CVE-2026-69112","ts":1789383671185,"field":"severity","old":"high","new":"medium"},{"seq":195238,"id":"CVE-2026-69112","ts":1789380524536,"field":"severity","old":"medium","new":"high"},{"seq":194025,"id":"CVE-2026-69112","ts":1789378612975,"field":"severity","old":"high","new":"medium"},{"seq":192812,"id":"CVE-2026-69112","ts":1789376448655,"field":"severity","old":"medium","new":"high"},{"seq":191599,"id":"CVE-2026-69112","ts":1789373522087,"field":"severity","old":"high","new":"medium"},{"seq":190384,"id":"CVE-2026-69112","ts":1789369399324,"field":"severity","old":"medium","new":"high"},{"seq":189171,"id":"CVE-2026-69112","ts":1789368319917,"field":"severity","old":"high","new":"medium"},{"seq":187954,"id":"CVE-2026-69112","ts":1789365188156,"field":"severity","old":"medium","new":"high"},{"seq":186741,"id":"CVE-2026-69112","ts":1789363384458,"field":"severity","old":"high","new":"medium"},{"seq":185527,"id":"CVE-2026-69112","ts":1789361169939,"field":"severity","old":"medium","new":"high"},{"seq":184314,"id":"CVE-2026-69112","ts":1789358241676,"field":"severity","old":"high","new":"medium"},{"seq":182565,"id":"CVE-2026-69112","ts":1789354266360,"field":"severity","old":"medium","new":"high"},{"seq":181358,"id":"CVE-2026-69112","ts":1789353220041,"field":"severity","old":"high","new":"medium"},{"seq":180151,"id":"CVE-2026-69112","ts":1789350217205,"field":"severity","old":"medium","new":"high"},{"seq":178944,"id":"CVE-2026-69112","ts":1789348183420,"field":"severity","old":"high","new":"medium"},{"seq":177737,"id":"CVE-2026-69112","ts":1789346322289,"field":"severity","old":"medium","new":"high"},{"seq":176530,"id":"CVE-2026-69112","ts":1789343098491,"field":"severity","old":"high","new":"medium"},{"seq":174647,"id":"CVE-2026-69112","ts":1789334831790,"field":"severity","old":"medium","new":"high"},{"seq":173442,"id":"CVE-2026-69112","ts":1789333583187,"field":"severity","old":"high","new":"medium"},{"seq":172256,"id":"CVE-2026-69112","ts":1789331046405,"field":"severity","old":"medium","new":"high"},{"seq":171070,"id":"CVE-2026-69112","ts":1789328684935,"field":"severity","old":"high","new":"medium"},{"seq":169865,"id":"CVE-2026-69112","ts":1789327117767,"field":"severity","old":"medium","new":"high"},{"seq":168660,"id":"CVE-2026-69112","ts":1789323741122,"field":"severity","old":"high","new":"medium"},{"seq":167455,"id":"CVE-2026-69112","ts":1789319641390,"field":"severity","old":"medium","new":"high"},{"seq":166250,"id":"CVE-2026-69112","ts":1789318639681,"field":"severity","old":"high","new":"medium"},{"seq":165045,"id":"CVE-2026-69112","ts":1789315751033,"field":"severity","old":"medium","new":"high"},{"seq":163840,"id":"CVE-2026-69112","ts":1789313542317,"field":"severity","old":"high","new":"medium"},{"seq":162635,"id":"CVE-2026-69112","ts":1789311851693,"field":"severity","old":"medium","new":"high"},{"seq":161430,"id":"CVE-2026-69112","ts":1789308608258,"field":"severity","old":"high","new":"medium"},{"seq":160935,"id":"CVE-2026-69112","ts":1789304560881,"field":"severity","old":"medium","new":"high"},{"seq":160482,"id":"CVE-2026-69112","ts":1789304078891,"field":"severity","old":"high","new":"medium"},{"seq":159543,"id":"CVE-2026-69112","ts":1789300434570,"field":"severity","old":"medium","new":"high"},{"seq":156532,"id":"CVE-2026-69112","ts":1789294670217,"field":"severity","old":"high","new":"medium"},{"seq":155327,"id":"CVE-2026-69112","ts":1789292856557,"field":"severity","old":"medium","new":"high"},{"seq":154122,"id":"CVE-2026-69112","ts":1789289698774,"field":"severity","old":"high","new":"medium"},{"seq":152772,"id":"CVE-2026-69112","ts":1789281600965,"field":"severity","old":"medium","new":"high"},{"seq":152412,"id":"CVE-2026-69112","ts":1789281187261,"field":"severity","old":"high","new":"medium"},{"seq":151373,"id":"CVE-2026-69112","ts":1789277577738,"field":"severity","old":"medium","new":"high"},{"seq":150334,"id":"CVE-2026-69112","ts":1789276170490,"field":"severity","old":"high","new":"medium"},{"seq":149301,"id":"CVE-2026-69112","ts":1789273784446,"field":"severity","old":"medium","new":"high"},{"seq":148268,"id":"CVE-2026-69112","ts":1789271243056,"field":"severity","old":"high","new":"medium"},{"seq":147033,"id":"CVE-2026-69112","ts":1789269870399,"field":"severity","old":"medium","new":"high"},{"seq":145105,"id":"CVE-2026-69112","ts":1789266276593,"field":"severity","old":"high","new":"medium"},{"seq":144009,"id":"CVE-2026-69112","ts":1789262567280,"field":"severity","old":"medium","new":"high"},{"seq":142913,"id":"CVE-2026-69112","ts":1789261444094,"field":"severity","old":"high","new":"medium"},{"seq":141744,"id":"CVE-2026-69112","ts":1789258780417,"field":"severity","old":"medium","new":"high"},{"seq":140585,"id":"CVE-2026-69112","ts":1789256636635,"field":"severity","old":"high","new":"medium"}]}