All vulnerabilities
CVE-2026-66007GHSA-379c-qx7v-6h59PYSEC-2026-3716

Hugging Face Datasets folder-based builders allow path traversal through file_name metadata

huggingface datasetspipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
6.9Medium
ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 24 Jul 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.55%Chance of exploitation activity in the next 30 days, higher than 45% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in5.0.1Fixed versionGitHub
Published24 Jul 2026Updated 2 Oct 2026CVE List

What fixes it

  • 5.0.1datasets, pipGitHub
  • 5.0.1datasets, PyPIOSVpip install "datasets>=5.0.1"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Datasets through 5.0.0, fixed in f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted file_name values with directory traversal sequences to read arbitrary local files, which are then embedded into output when save_to_disk or push_to_hub is called.

Text from CVE List

Affected versions 54

  • datasets, pip< 5.0.1GitHub
  • datasetsaffected: all versions through 5.0.0CVE List
  • datasetsunaffected: f989ef9b4cc6c0039a7a82458eebca49e2b58b4bCVE List
  • datasets, PyPIfrom first release, fixed in 5.0.1OSV
  • datasets, PyPI0.0.9OSV
  • datasets, PyPI1.0.0OSV
  • datasets, PyPI1.0.1OSV
  • datasets, PyPI1.0.2OSV
  • datasets, PyPI1.1.0OSV
  • datasets, PyPI1.1.1OSV
  • datasets, PyPI1.1.2OSV
  • datasets, PyPI1.1.3OSV
  • datasets, PyPI1.10.0OSV
  • datasets, PyPI1.10.1OSV
  • datasets, PyPI1.10.2OSV
  • datasets, PyPI1.11.0OSV
  • datasets, PyPI1.12.0OSV
  • datasets, PyPI1.12.1OSV
  • datasets, PyPI1.13.0OSV
  • datasets, PyPI1.13.1OSV
  • datasets, PyPI1.13.2OSV
  • datasets, PyPI1.13.3OSV
  • datasets, PyPI1.14.0OSV
  • datasets, PyPI1.15.0OSV
  • datasets, PyPI1.15.1OSV
  • datasets, PyPI1.16.0OSV
  • datasets, PyPI1.16.1OSV
  • datasets, PyPI1.17.0OSV
  • datasets, PyPI1.18.0OSV
  • datasets, PyPI1.18.1OSV
  • datasets, PyPI1.18.2OSV
  • datasets, PyPI1.18.3OSV
  • datasets, PyPI1.18.4OSV
  • datasets, PyPI1.2.0OSV
  • datasets, PyPI1.2.1OSV
  • datasets, PyPI1.3.0OSV
  • datasets, PyPI1.4.0OSV
  • datasets, PyPI1.4.1OSV
  • datasets, PyPI1.5.0OSV
  • datasets, PyPI1.6.0OSV
  • datasets, PyPI1.6.1OSV
  • datasets, PyPI1.6.2OSV
  • datasets, PyPI1.7.0OSV
  • datasets, PyPI1.8.0OSV
  • datasets, PyPI1.9.0OSV
  • datasets, PyPI2.0.0OSV
  • datasets, PyPI2.1.0OSV
  • datasets, PyPI2.10.0OSV
  • datasets, PyPI2.10.1OSV
  • datasets, PyPI2.11.0OSV
  • datasets, PyPI2.12.0OSV
  • datasets, PyPI2.13.0OSV
  • datasets, PyPI2.13.1OSV
  • datasets, PyPI2.13.2OSV

References 7