CVE-2026-66007: Hugging Face Datasets folder-based builders allow path traversal through file_name metadata
(updated )
Datasets through 5.0.0, fixed in f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted file_name values with directory traversal sequences to read arbitrary local files, which are then embedded into output when save_to_disk or push_to_hub is called.
References
- github.com/advisories/GHSA-379c-qx7v-6h59
- github.com/huggingface/datasets/commit/f989ef9b4cc6c0039a7a82458eebca49e2b58b4b
- github.com/huggingface/datasets/issues/8324
- github.com/huggingface/datasets/pull/8325
- github.com/pypa/advisory-database/tree/main/vulns/datasets/PYSEC-2026-3716.yaml
- nvd.nist.gov/vuln/detail/CVE-2026-66007
- www.vulncheck.com/advisories/datasets-path-traversal-via-unsanitized-file-name-metadata
Code Behaviors & Features
Detect and mitigate CVE-2026-66007 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →