[GHSA-4j2p-28q2-5m79] Hugging Face Accelerate through 1.14.0 contains a path...

[KMChris]

Updates

• Affected products
• CVSS v3
• CVSS v4
• Description
• References
• Source code location
• Summary

Comments
This advisory has no affected product, so it is not actionable and Dependabot cannot surface it.

The affected software is the PyPI package accelerate (Hugging Face Accelerate), published from
https://github.com/huggingface/accelerate. The mapping is confirmed by the upstream report, which
locates the flaw in accelerate.utils.load_checkpoint_in_model / load_checkpoint_and_dispatch in
src/accelerate/utils/modeling.py:

• Report: [Security] Path traversal + malicious-model DoS via sharded-checkpoint weight_map in …. huggingface/accelerate#4067
• Proposed fix: Reject sharded-checkpoint shard paths that escape the checkpoint folder huggingface/accelerate#4138

Version range: the NVD and VulnCheck records both state "through 1.14.0", and 1.14.0 is the newest
release on PyPI (https://pypi.org/project/accelerate/, released 2026-06-11) as well as the newest
tag in the repository, so <= 1.14.0 covers every released version.

No patched version: PR #4138 is still open, and the earlier attempt (#4070) was closed by the stale
bot without review, so the unsanitized os.path.join(checkpoint_folder, f) call is still present on
main. I have left "Patched versions" empty rather than guessing at one.

Also included: a complete title (the current one is truncated mid-sentence), the source code
location, and a PyPI reference supporting the ecosystem mapping. CWE-22 and the CVSS v4 base vector
are unchanged from the CNA record.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.