CVE-2026-113738

Deferred Deferred - Pending Action

Path Traversal in Jackrong-llm-finetuning-guide

Publication date: 2026-10-21

Last updated on: 2026-10-28

Assigner: VulDB

Description

A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extract_mtp_heads of the file qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py of the component MTP weight_map Handler. The manipulation of the argument shard_name leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-28

Generated

2026-11-10

AI Q&A

2026-10-22

EPSS Evaluated

2026-11-08

NVD

CVE-2026-113738

EUVD

EUVD-2026-106991

Affected Vendors & Products

Vendor	Product	Version / Range
R6410418	Jackrong-llm-finetuning-guide	ef2b17f2798cd18cd85375080c35a58397ad0d09

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal issue in the MTP weight_map handling of the qwen-mtp-gguf pipeline. The extract_mtp_heads function in qwen_mtp_gguf_pipeline.py improperly validates the shard_name argument from an untrusted model.safetensors.index.json file. Attackers can use absolute paths to access arbitrary local files on the system running the script. The pipeline may then include data from these files in the output model, potentially leaking sensitive information through error messages.

Detection Guidance

Check for suspicious file reads in the qwen-mtp-gguf pipeline logs, particularly for paths outside the intended snapshot directory. Look for errors in extract_mtp_heads() related to unvalidated shard_name arguments. Monitor for unexpected file writes to mtp_heads.safetensors or similar outputs.

Impact Analysis

An attacker could exploit this to read sensitive files on your system, including configuration files or other data accessible by the pipeline. If the pipeline processes malicious input, it might inject unauthorized tensor data into the final model output. This could lead to data leaks, model corruption, or further exploitation depending on the environment where the model is deployed.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's requirements for safeguarding protected health information. If exploited, it may result in data breaches, non-compliance with privacy regulations, and potential legal consequences depending on the data accessed.

Mitigation Strategies

Validate shard_name inputs in extract_mtp_heads() to ensure they are relative paths within the snapshot directory. Disable the pipeline's ability to read external files by restricting file access to the local directory. Update to the latest commit if a patch is released.

Hi! I’m here to help you understand CVE-2026-113738. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...