CyberRota Analysis
AI-GeneratedThe vulnerability allows attackers to exploit the _get_checkpoint_shard_files function in Diffusers through version 0.39.0, enabling them to perform path traversal attacks by manipulating weight_map values in model index JSON. This can lead to unauthorized access to arbitrary files outside the intended model directory, potentially exposing sensitive information. Organizations utilizing affected versions of Diffusers should prioritize patching to mitigate the risk of data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpoint_shard_files function that allows attackers to read arbitrary files by supplying malicious weight_map values in model index JSON. Attackers can use ../ sequences or absolute paths in weight_map entries to escape the model directory and read safetensors files outside the intended location during model loading.