CVE-2026-65920 — Diffusers Path Traversal via weight_map Arbitrary File Read
Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpoint_shard_files function that allows attackers to read arbitrary fi…
Published: 2026-07-23 · CVSS: 5.3 · CVSS 4.0
Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpoint_shard_files function that allows attackers to read arbitrary files by supplying malicious weight_map values in model index JSON. Attackers can use ../ sequences or absolute paths in weight_map entries to escape the model directory and read safetensors files outside the intended location during model loading.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7