CVE-2026-65010Medium· 6.6▾ TwilightPoC availableDatasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can re…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 36.3 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can redirect archive extraction to arbitrary filesystem locations in shared-cache environments, enabling overwrite of sensitive files and potential privilege escalation or code execution.
datasets <= 5.00Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-57845High· 8.8Hugging Face Datasets through 5.1.0 Pickle Deserialization RCE via Pandas Builder
CVE-2026-75104Medium· 5.5Hugging Face Transformers fails to validate shard filenames in checkpoint index files, allowing attackers to read arbitrary files outside the model directory
CVE-2026-107810High· 8.1Nginx UI is a web user interface for the Nginx web server
CVE-2026-77159Medium· 5.5A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function
CVE-2026-12080High· 7.3A flaw was found in the QEMU Guest Agent (qga)
CVE-2025-11844Medium· 5.4Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py