TI-2026-48517 Aliases CVE-2026-69112 GHSA-4j2p-28q2-5m79

Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map

MEDIUM 64CWE-22Published 2026-08-10 · Updated 2026-11-08

Key facts

Attack vector: Local
Privileges required: None
User interaction: Passive
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: High · None · High
Fix status: Partial Red Hat: 5 fixed, 4 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat.

Summary

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read arbitrary files, or point shard entries at named pipes to cause indefinite blocking and denial of service.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00187 8th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Partial Red Hat: 8 advisoriesRed Hat: 5 fixed, 4 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
huggingface	accelerate	up to 1.14.0	—	No fix listed	CNA
—	accelerate (PyPI)	up to 1.14.0	—	No fix listed	GHSA-4j2p-28q2-5m79

accelerate Vendorhuggingface Affected up to 1.14.0 Fixed in — No fix listed CNA
accelerate (PyPI) Vendor— Affected up to 1.14.0 Fixed in — No fix listed GHSA-4j2p-28q2-5m79

Remediation

Red Hat 8 advisories

RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
RHOAI 2.25.12 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
RHSA-2026:86891 Released 2026-10-21 · Red Hat rating Critical
RHOAI 3.5.2 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9 +47
RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
RHOAI 3.4.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47

Show 5 more Red Hat advisories

RHSA-2026:83121 Released 2026-10-14 · Red Hat rating Important
Red Hat AI Inference 3.4.6 (rocm)
- Red Hat AI Inference Server 3.4 registry.redhat.io/rhaii/vllm-rocm-rhel9
RHSA-2026:83116 Released 2026-10-14 · Red Hat rating Important
Red Hat AI Inference Model Optimization Tools 3.4.6 (cuda)
- Red Hat AI Inference Server 3.4 registry.redhat.io/rhaii/model-opt-cuda-rhel9
RHSA-2026:83114 Released 2026-10-14 · Red Hat rating Important
Red Hat AI Inference 3.4.6 (spyre)
- Red Hat AI Inference Server 3.4 registry.redhat.io/rhaii/vllm-spyre-rhel9
RHSA-2026:82371 Released 2026-10-13 · Red Hat rating Critical
Red Hat AI Inference 3.5.2 (spyre)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-spyre-rhel9
RHSA-2026:65126 Released 2026-09-08 · Red Hat rating Important
RHOAI 2.25.11 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Product	Status	Plan or fix
Lightspeed Core	Affected	No fix yet
Red Hat AI Inference Server	Affected	No fix planned: Will not fix
Red Hat Enterprise Linux AI (RHEL AI) 3	Affected	No fix yet
Red Hat OpenShift AI (RHOAI)	Affected	No fix yet
Red Hat AI Inference Server 3.4	Fixed	RHSA-2026:83114, RHSA-2026:83116, RHSA-2026:83121
Red Hat AI Inference Server 3.5	Fixed	RHSA-2026:82371
Red Hat OpenShift AI 2.25	Fixed	RHSA-2026:65126, RHSA-2026:87410
Red Hat OpenShift AI 3.4	Fixed	RHSA-2026:84734
Red Hat OpenShift AI 3.5	Fixed	RHSA-2026:86891

Not affected: 5 products

OpenShift Lightspeed
Red Hat OpenShift AI (RHOAI)
Red Hat OpenShift AI 2.25
Red Hat OpenShift AI 3.4
Red Hat OpenShift AI 3.5

Timeline

2026-10-02 Threatist record created from CVE-2026-69112
2026-10-03 Alias added: GHSA-4j2p-28q2-5m79
2026-10-07 Affected versions changed · Red Hat
2026-10-14 Fix available: RHSA-2026:82371 · Red Hat
2026-10-16 Fix available: RHSA-2026:83116 · Red Hat
2026-10-16 Fix available: RHSA-2026:83114 · Red Hat
2026-10-16 Fix available: RHSA-2026:83121 · Red Hat
2026-10-16 Fix available: Red Hat AI Inference Server 3.4, Red Hat AI Inference Server 3.5 · Red Hat
2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
2026-10-20 Fix available: Red Hat OpenShift AI 3.4 · Red Hat
2026-10-22 Fix available: RHSA-2026:86891 · Red Hat
2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
2026-10-23 Fix available: Red Hat OpenShift AI 3.5 · Red Hat

References

Exploit 1

Researcher Disclosure

Patch 2

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-69112

Other 1

https://github.com/huggingface/accelerate

TI-2026-48351 sentence-transformers Arbitrary Code Execution on Local Model Load Despite trust_remote_code=False CVSS 4.0CRITICAL 9.3
TI-2026-20914 LeRobot Unsafe Deserialization Remote Code Execution via gRPC CVSS 4.0CRITICAL 9.3
TI-2026-04577 Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers CVSS 3.1CRITICAL 9.6
TI-2025-04589 Sandbox Escape Vulnerability in huggingface/smolagents CVSS 3.1CRITICAL 10.0
TI-2026-79938 Pickle deserialization in Hugging Face Datasets allows code execution CVSS 4.0HIGH 8.7
TI-2026-32710 Diffusers: None.py Trust Remote Code Bypass CVSS 3.1HIGH 8.8

See all 58 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences