Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map
Published Aug 10, 2026
6.9
MEDIUMCVSS 4.0
EPSS 0.19%
Description
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read arbitrary files, or point shard entries at named pipes to cause indefinite blocking and denial of service.
Affected products
-
- Version 0StatusaffectedConstraints<=1.14.0
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Huggingface | Accelerate | affected |
|
No data.
No data.
Red Hat OpenShift AI 2.25
rhoai/odh-caikit-tgis-serving-rhel9:1787060100
Fixed · RHSA-2026:65126
Lightspeed Core
lightspeed-core/lightspeed-stack-rhel9
Affected
Lightspeed Core
lightspeed-core/rag-tool-cpu-rhel9
Affected
Lightspeed Core
lightspeed-core/rag-tool-cuda-12.9-rhel9
Affected
OpenShift Lightspeed
openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9
Not affected
Red Hat AI Inference Server
rhaii/model-opt-cuda-rhel9
Affected
Red Hat AI Inference Server
rhaii/vllm-rocm-rhel9
Affected
Red Hat AI Inference Server
rhaii/vllm-spyre-rhel9
Affected
Red Hat AI Inference Server
rhaiis/model-opt-cuda-rhel9
Affected
Red Hat AI Inference Server
rhaiis/vllm-cuda-rhel9
Affected
Red Hat AI Inference Server
rhaiis/vllm-rocm-rhel9
Affected
Red Hat AI Inference Server
rhaiis/vllm-spyre-rhel9
Will not fix
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-aws-cuda-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-azure-cuda-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-azure-rocm-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-cuda-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-gcp-cuda-rhel9
Affected
Red Hat Enterprise Linux AI (RHEL AI) 3
rhelai3/bootc-rocm-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhai-early-access/docling-sdk-cuda-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhai-early-access/docling-serve-cuda-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-automl-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-autorag-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-caikit-nlp-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-feature-server-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-kserve-agent-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-kserve-autogluon-server-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-kserve-controller-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-kserve-router-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-kserve-storage-initializer-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ogx-core-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-openvino-model-server-rhel9
Fix deferred
Red Hat OpenShift AI (RHOAI)
rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-ta-lmes-job-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th-torch-cpu-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th-torch-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th-torch-rocm-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th06-cpu-torch210-py312-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th06-cpu-torch291-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th06-cuda130-torch210-py312-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th06-cuda130-torch291-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-th06-rocm64-torch291-py312-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-training-cuda121-torch24-py311-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-training-cuda124-torch25-py311-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-training-cuda128-torch28-py312-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-training-cuda128-torch29-py312-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-training-rocm62-torch24-py311-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-training-rocm62-torch25-py311-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-training-rocm64-torch28-py312-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-training-rocm64-torch29-py312-rhel9
Will not fix
Red Hat OpenShift AI (RHOAI)
rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
Affected
Red Hat OpenShift AI (RHOAI)
rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat OpenShift AI 2.25 | rhoai/odh-caikit-tgis-serving-rhel9:1787060100 | Fixed | RHSA-2026:65126 |
| Lightspeed Core | lightspeed-core/lightspeed-stack-rhel9 | Affected | n/a |
| Lightspeed Core | lightspeed-core/rag-tool-cpu-rhel9 | Affected | n/a |
| Lightspeed Core | lightspeed-core/rag-tool-cuda-12.9-rhel9 | Affected | n/a |
| OpenShift Lightspeed | openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 | Not affected | n/a |
| Red Hat AI Inference Server | rhaii/model-opt-cuda-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaii/vllm-rocm-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaii/vllm-spyre-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaiis/model-opt-cuda-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaiis/vllm-cuda-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaiis/vllm-rocm-rhel9 | Affected | n/a |
| Red Hat AI Inference Server | rhaiis/vllm-spyre-rhel9 | Will not fix | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-aws-cuda-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-azure-cuda-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-azure-rocm-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-cuda-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-gcp-cuda-rhel9 | Affected | n/a |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-rocm-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhai-early-access/docling-sdk-cuda-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhai-early-access/docling-serve-cuda-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-automl-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-autorag-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-caikit-nlp-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-feature-server-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-agent-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-autogluon-server-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-controller-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-router-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-kserve-storage-initializer-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ogx-core-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-openvino-model-server-rhel9 | Fix deferred | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-ta-lmes-job-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th-torch-cpu-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th-torch-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th-torch-rocm-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th06-cpu-torch210-py312-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th06-cpu-torch291-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th06-cuda130-torch210-py312-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th06-cuda130-torch291-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-th06-rocm64-torch291-py312-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-training-cuda121-torch24-py311-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-training-cuda124-torch25-py311-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-training-cuda128-torch28-py312-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-training-cuda128-torch29-py312-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-training-rocm62-torch24-py311-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-training-rocm62-torch25-py311-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-training-rocm64-torch28-py312-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-training-rocm64-torch29-py312-rhel9 | Will not fix | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 | Affected | n/a |
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 | Affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
This is an Important vulnerability in Hugging Face Accelerate that could lead to arbitrary file disclosure and denial of service. While requiring user interaction, an attacker could craft malicious `weight_map` entries in sharded checkpoint indexes to exploit path traversal, impacting the confidentiality and availability of systems utilizing affected Red Hat AI/ML products.
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
References (10)
- https://access.redhat.com/security/cve/CVE-2026-69112 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2513620 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-55743 Advisory
- https://github.com/advisories/GHSA-4j2p-28q2-5m79 Advisory
- https://github.com/huggingface/accelerate/issues/4067 technical-descriptionexploit
- https://github.com/huggingface/accelerate/pull/4070 issue-tracking
- https://github.com/huggingface/accelerate/pull/4138 issue-tracking
- https://nvd.nist.gov/vuln/detail/CVE-2026-69112
- https://www.cve.org/CVERecord?id=CVE-2026-69112
- https://www.vulncheck.com/advisories/hugging-face-accelerate-path-traversal-and-dos-via-weight-map third-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2026-69112 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2513620 | Issue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-55743 | Advisory | |
| https://github.com/advisories/GHSA-4j2p-28q2-5m79 | Advisory | |
| https://github.com/huggingface/accelerate/issues/4067 | technical-descriptionexploit | |
| https://github.com/huggingface/accelerate/pull/4070 | issue-tracking | |
| https://github.com/huggingface/accelerate/pull/4138 | issue-tracking | |
| https://nvd.nist.gov/vuln/detail/CVE-2026-69112 | ||
| https://www.cve.org/CVERecord?id=CVE-2026-69112 | ||
| https://www.vulncheck.com/advisories/hugging-face-accelerate-path-traversal-and-dos-via-weight-map | third-party-advisory |
Change history (0)
No recorded changes yet.