Skip to content
fr Sign in
5.3 Medium

CVE-2026-65920 Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the…

Description

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpoint_shard_files function that allows attackers to read arbitrary files by supplying malicious weight_map values in model index JSON. Attackers can use ../ sequences or absolute paths in weight_map entries to escape the model directory and read safetensors files outside the intended location during model loading.

Affected products and versions

Product Affected versions Fixed in
diffusers 0.39 earliest → 0.39.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of diffusers

The 4 CVEs of diffusers →
CVE-2026-45804 Diffusers is the a library for pretrained diffusion models 7.5 High CVE-2026-44827 Diffusers is the a library for pretrained diffusion models 8.8 High CVE-2026-44513 Diffusers is the a library for pretrained diffusion models 8.8 High
Track this CVE