CVE-2026-113737

Deferred Deferred - Pending Action

Path Traversal in Jackrong-llm-finetuning-guide

Publication date: 2026-10-21

Last updated on: 2026-10-27

Assigner: VulDB

Description

A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validate_indexed_tensors of the file qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py. Executing a manipulation of the argument weight_map can lead to path traversal. The attack may be performed from remote. The exploit has been published and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-27

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-113737

EUVD

EUVD-2026-106989

Affected Vendors & Products

Vendor	Product	Version / Range
R6410418	Jackrong-llm-finetuning-guide	ef2b17f2798cd18cd85375080c35a58397ad0d09

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal flaw in the Jackrong LLM Fine-Tuning Guide's qwen-mtp-gguf pipeline. It occurs in the validate_indexed_tensors function where weight_map values from a model's index file are joined to the model directory path without proper validation. Attackers can manipulate these values to specify absolute paths or use .. segments, causing the pipeline to read arbitrary local files outside the intended directory.

Detection Guidance

Check for suspicious model repositories or files referencing absolute paths in weight_map within qwen-mtp-gguf pipelines. Inspect qwen_mtp_gguf_pipeline.py for validate_indexed_tensors and extract_mtp_heads functions. Monitor for unauthorized file access attempts or errors in model conversion logs.

Impact Analysis

This vulnerability allows remote attackers to access sensitive files on your system through the affected pipeline. It can lead to information disclosure by leaking filesystem structure via error messages, filesystem probing, and potential data exfiltration if combined with other vulnerabilities. Attackers could create malicious model repositories to read arbitrary local files during model processing.

Compliance Impact

This vulnerability could lead to unauthorized file access and information disclosure, which may violate data protection requirements under GDPR (e.g., unauthorized access to personal data) and HIPAA (e.g., exposure of protected health information). The path traversal flaw allows attackers to read arbitrary local files, potentially accessing sensitive data outside intended directories.

Mitigation Strategies

Update the Jackrong-llm-finetuning-guide to a patched version if available. Validate weight_map inputs in validate_indexed_tensors to reject absolute paths and .. segments. Restrict file access permissions and monitor for anomalous file reads in model directories.

Hi! I’m here to help you understand CVE-2026-113737. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...