CVE-2026-69112: Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
(updated )
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read arbitrary files, or point shard entries at named pipes to cause indefinite blocking and denial of service.
References
- github.com/advisories/GHSA-4j2p-28q2-5m79
- github.com/huggingface/accelerate/issues/4067
- github.com/huggingface/accelerate/pull/4070
- github.com/huggingface/accelerate/pull/4138
- nvd.nist.gov/vuln/detail/CVE-2026-69112
- www.vulncheck.com/advisories/hugging-face-accelerate-path-traversal-and-dos-via-weight-map
Code Behaviors & Features
Detect and mitigate CVE-2026-69112 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →