CVE-2026-69112

Name of the Vulnerable Software and Affected Versions Hugging Face Accelerate versions prior to 1.15.0

Description A path traversal issue exists in the load checkpoint in model() and load checkpoint and dispatch() functions. These functions do not properly sanitize weight map entries within sharded checkpoint indexes. This allows attackers to use absolute paths or relative paths containing ../ sequences to read arbitrary files. Additionally, pointing shard entries to named pipes can lead to indefinite blocking, resulting in a denial of service.

Recommendations Update Hugging Face Accelerate to version 1.15.0 or later. As a temporary mitigation, restrict the use of the load checkpoint in model() and load checkpoint and dispatch() functions when processing untrusted checkpoint indexes.