What is CVE-2026-65920?
CVE-2026-65920 is a path traversal vulnerability in the `_get_checkpoint_shard_files` function of Diffusers library up to version 0.39.0. Attackers can read arbitrary files by supplying malicious `weight_map` values (e.g., `../` sequences) in the model index JSON. Users must update to the version fixed in commit `cee298c` immediately.
Azərbaycanca: CVE-2026-65920 Diffusers kitabxanasının 0.39.0 versiyasına qədər olan versiyalarında `_get_checkpoint_shard_files` funksiyasında path traversal zəifliyidir. Təcavüzkar model indeks JSON-də zərərli `weight_map` dəyərləri (məsələn, `../`) göndərərək ixtiyari faylları oxuya bilər. Diffusers istifadəçiləri dərhal commit `cee298c` ilə düzəldilmiş versiyaya yeniləməlidir.
Related CVEs
link basis: same weakness class CWE-22
FAQ2
In which function of the Diffusers library was CVE-2026-65920 discovered?
The vulnerability was discovered in the `_get_checkpoint_shard_files` function.
How can an attacker read arbitrary files using CVE-2026-65920?
An attacker can read arbitrary files by supplying path traversal sequences such as `../` in the `weight_map` values within the model index JSON.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.