CVE-2026-69112: Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read arbitrary files, or point shard entries at named pipes to cause indefinite blocking and denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Hugging Face Accelerateto a version that resolves this vulnerability.Fixed in 1.14.0 - Compensating control
Mitigate the path traversal/DoS by ensuring sharded checkpoint indexes/weight_map entries supplied to load_checkpoint_in_model and load_checkpoint_and_dispatch are sanitized and do not contain '../' sequences, absolute paths, or references that point shard entries to named pipes.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-69112?
The severity of CVE-2026-69112 is rated as high with a score of 7.1.
How do I fix CVE-2026-69112?
To fix CVE-2026-69112, update to Hugging Face Accelerate version 1.14.1 or later, which addresses the path traversal vulnerability.
What are the potential impacts of CVE-2026-69112?
The potential impacts of CVE-2026-69112 include unauthorized access to sensitive files and denial of service.
Which functions are affected by CVE-2026-69112?
CVE-2026-69112 affects the load_checkpoint_in_model and load_checkpoint_and_dispatch functions.
Which versions are vulnerable to CVE-2026-69112?
Versions of Hugging Face Accelerate prior to 1.14.1 are vulnerable to CVE-2026-69112.