CVE-2026-124999: braindecode Hub Integration base.py EEGModuleMixin._from_pretrained path traversal
A security vulnerability has been detected in braindecode up to 1.8.2. This affects the function EEGModuleMixin.frompretrained of the file braindecode/models/base.py of the component Hub Integration. Such manipulation of the argument filename leads to path traversal. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.0.0 mitigates this issue. The name of the patch is 05b764d93b9a50400f523206fbe03d73d0cf5edb. It is recommended to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
braindecodeto a version that resolves this vulnerability.Fixed in 2.0.0Patch 05b764d93b9a50400f523206fbe03d73d0cf5edb
Event History
Frequently Asked Questions
Which deployments are affected?
braindecode installations up to and including version 1.8.2 are affected where the Hub Integration code path can invoke EEGModuleMixin._from_pretrained with an attacker-controlled filename.
What does an attacker need to exploit this issue?
The attack is remote and does not require privileges, but it requires user interaction according to the supplied severity vector. Exploitation relies on manipulating the filename argument to trigger path traversal.
Is a fix available?
Yes. Upgrading braindecode to version 2.0.0 mitigates the issue; the referenced patch is 05b764d93b9a50400f523206fbe03d73d0cf5edb.
How urgent is remediation?
The issue is rated low severity with a 2.1 score, but a public proof of concept or exploit disclosure exists and may be used. Prioritize upgrades for deployments that expose or process untrusted filename input through the Hub Integration.