PT-2026-64045 · Hugging Face · Diffusers

George Chen · CVE-2026-65920 · Published 2026-07-23 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Diffusers versions prior to 0.39.1

Description A path traversal issue exists in the get checkpoint shard files() function. This allows an attacker to read arbitrary files by providing malicious weight map values within the model index JSON. By using absolute paths or ../ sequences in the weight map entries, an attacker can escape the intended model directory and access safetensors files located elsewhere during the model loading process.

Recommendations Update to the version containing commit cee298c or newer.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-65920

Affected Products

Diffusers

References · 6

• 🔥 https://github.com/huggingface/diffusers/issues/14175 · Exploit
• https://github.com/huggingface/diffusers/commit/cee298c1f37c439a9a408396b8283a921238a1c6 · Patch
• https://github.com/huggingface/diffusers/pull/14182 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-65920 · Security Note
• https://t.me/CVEtracker/61075 · Telegram Post
• https://vulncheck.com/advisories/diffusers-path-traversal-via-weight-map-arbitrary-file-read · Note