CVE-2026-124589: lxtGH OMG-Seg MoE Shard Checkpoint Loader handle_moe_load_and_save.py load_state_dict_into_model path traversal
A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects the function loadstatedictintomodel of the file omgllava/xtuner/utils/handlemoeloadandsave.py of the component MoE Shard Checkpoint Loader. Executing a manipulation of the argument weightmap can lead to path traversal. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to control to exploit this issue?
The attacker needs to manipulate the weight_map argument processed by load_state_dict_into_model in the MoE Shard Checkpoint Loader. The issue is remotely exploitable, and no privileges are listed as required, although user interaction is required by the supplied severity vector.
Which versions are affected?
The affected code is reported in OMG-Seg through commit f3b26b609bae919760cd3ccf09c36179bb8624a0. The project does not use versioning, so affected and unaffected release versions are not available.
Is public exploit information available?
Yes. A public exploit is reported as available, so systems that process untrusted or attacker-influenced weight_map data should be treated as higher priority for review.
Is a vendor fix available?
No response from the project is reported after it was notified through an issue report. No fixed version or patch is identified in the available information.