Path Traversal Vulnerability in Diffusers by Hugging Face
CVE-2026-65920

5.3MEDIUM

Key Information:

Vendor: Huggingface
Status: Diffusers
Vendor: CVE Published:; 23 July 2026

🔔 Create Huggingface Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-65920?

The Diffusers library by Hugging Face encountered a path traversal issue in the _get_checkpoint_shard_files function, allowing attackers to exploit the vulnerability by providing malicious weight_map values in model index JSON. This flaw enables them to utilize ../ sequences or absolute paths, thereby escaping the designated model directory and reading sensitive safetensors files stored outside the intended location during the loading of models. The vulnerability was addressed in commit cee298c, which rectifies the issue to prevent unauthorized access to the file system.

Affected Version(s)

diffusers 0 <= 0.39.0

diffusers cee298c1f37c439a9a408396b8283a921238a1c6

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-65920 - Proof of Concept