Read the docs
TI-2026-83743 Aliases CVE-2026-120335GHSA-p764-mm73-mpf6

Path traversal in deepset-ai farm Model Package Loader

Priority MEDIUM 46CWE-22Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

deepset-ai farm up to 0.8.0 contains a path traversal flaw (CWE-22) in the Model Package Loader, in the WordEmbedding_LM.load function of farm/modeling/language_model.py. Manipulating the embeddings_filename argument lets a local attacker with low privileges reach files outside the intended directory. A public exploit has been disclosed. The vendor did not respond to early contact, and the flaw affects only products no longer supported by the maintainer.

Written with Claude Haiku 5.5 from the sources below · 2026-11-05

Description from the CNA

A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbedding_LM.load of the file farm/modeling/language_model.py of the component Model Package Loader. The manipulation of the argument embeddings_filename leads to path traversal. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0016 5th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
deepset-aifarm0.1; 0.2; 0.3; 0.4; 0.5; 0.6; 0.7; 0.8.0—No fix listedCNA
  • farm Vendordeepset-ai Affected 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; 0.7; 0.8.0 Fixed in — No fix listed CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:deepset-ai:farm:*:*:*:*:*:*:*:*———
  • cpe:2.3:a:deepset-ai:farm:*:*:*:*:*:*:*:* Versions — — ·—

Remediation

The sources list no fixed version for deepset-ai farm.

Written with Claude Haiku 5.5 from the sources below · 2026-11-05

Timeline

  1. 2026-11-02 Threatist record created from CVE-2026-120335
  2. 2026-11-02 Alias added: GHSA-p764-mm73-mpf6
  3. 2026-11-02 CISA SSVC decision points changed
  4. 2026-11-02 Priority changed: LOW → MEDIUM

References

Exploit 1

  • TI-2026-83742 Path traversal in deepset-ai farm tokenizer loader CVSS 4.0MEDIUM 5.3
  • TI-2024-27972 Insecure Jinja2 templates rendered in Haystack Components can lead to RCE CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences