CVE-2026-62239

Name of the Vulnerable Software and Affected Versions FlashAttention versions prior to 2.8.3.post1

Description A symlink attack exists in the download and copy() function within hopper/setup.py. The issue occurs because NVIDIA toolchain archives are extracted without validating symlinks or filtering tar members. A local attacker can place a symlink in the predictable cache directory to redirect extracted binaries to a location of their choice, allowing arbitrary file write with the privileges of the victim during the build process.

Recommendations Update FlashAttention to the version containing commit 0816ef1.