{"schema":"threatline.record/2","record":{"id":"CVE-2026-66007","aliases":["GHSA-379c-qx7v-6h59","PYSEC-2026-3716"],"summary":"Hugging Face Datasets folder-based builders allow path traversal through file_name metadata","details":"Datasets through 5.0.0, fixed in f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted file_name values with directory traversal sequences to read arbitrary local files, which are then embedded into output when save_to_disk or push_to_hub is called.","categories":["Libraries & packages"],"product":"datasets","vendor":"huggingface","ecosystem":"pip","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-379c-qx7v-6h59","source_modified_at":"2026-10-02T22:43:38Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"pip","name":"datasets"},"range":"< 5.0.1"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-66007","source_modified_at":"2026-10-01T15:20:14.881Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"datasets","vendor":"huggingface","versions":[{"version":"0","status":"affected","versionType":"semver","lessThanOrEqual":"5.0.0"},{"status":"unaffected","version":"f989ef9b4cc6c0039a7a82458eebca49e2b58b4b","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-379c-qx7v-6h59","source_modified_at":"2026-10-02T23:11:03.776144963Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"PyPI","name":"datasets","purl":"pkg:pypi/datasets"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.0.1"}],"type":"ECOSYSTEM"}],"versions":["0.0.9","1.0.0","1.0.1","1.0.2","1.1.0","1.1.1","1.1.2","1.1.3","1.10.0","1.10.1","1.10.2","1.11.0","1.12.0","1.12.1","1.13.0","1.13.1","1.13.2","1.13.3","1.14.0","1.15.0","1.15.1","1.16.0","1.16.1","1.17.0","1.18.0","1.18.1","1.18.2","1.18.3","1.18.4","1.2.0","1.2.1","1.3.0","1.4.0","1.4.1","1.5.0","1.6.0","1.6.1","1.6.2","1.7.0","1.8.0","1.9.0","2.0.0","2.1.0","2.10.0","2.10.1","2.11.0","2.12.0","2.13.0","2.13.1","2.13.2"]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-379c-qx7v-6h59","source_modified_at":"2026-10-02T22:43:38Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"pip","name":"datasets"},"version":"5.0.1"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-379c-qx7v-6h59","source_modified_at":"2026-10-02T23:11:03.776144963Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"PyPI","name":"datasets","purl":"pkg:pypi/datasets"},"version":"5.0.1"}],"cvss":6.9,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.0055,"percentile":0.45243,"score_date":"2026-10-23"},"published_at":"2026-07-24T14:58:10.035Z","modified_at":"2026-10-02T23:11:03.776144963Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-379c-qx7v-6h59","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-02T22:43:38Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-66007","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-01T15:20:14.881Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-379c-qx7v-6h59","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-02T23:11:03.776144963Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-66007","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66007","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://github.com/huggingface/datasets/issues/8324","tags":["technical-description","exploit","issue-tracking"]},{"source":"CVE List","url":"https://github.com/huggingface/datasets/pull/8325","tags":["issue-tracking","patch"]},{"source":"CVE List","url":"https://github.com/huggingface/datasets/commit/f989ef9b4cc6c0039a7a82458eebca49e2b58b4b","tags":["patch"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/datasets-path-traversal-via-unsanitized-file-name-metadata","tags":["third-party-advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/datasets/PYSEC-2026-3716.yaml","source":"GitHub Advisory Database"},{"url":"https://github.com/advisories/GHSA-379c-qx7v-6h59","source":"GitHub Advisory Database"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"partial","assessed_at":"2026-07-24T15:18:39.129173Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-02T23:11:03.776144963Z","content_hash":"6468b9a202331b8c8cc977fcccfee07458f03b4739f6eccfdb2872563d306e79"}}