deepset-ai farm Path Traversal in Model Loaders

Path traversal in deepset-ai FARM through 0.8.0 allows unauthenticated remote attackers to influence the vocab_filename argument of EmbeddingTokenizer.from_pretrained and read files outside the intended vocabulary location, with limited confidentiality impact and no integrity or availability effect; user interaction is required per the assessed vector. Exploitation depends on a host application passing attacker-influenceable input into vocab_filename, and a public PoC reference exists; it is not verified as working exploit code. The vendor did not respond, the project is unmaintained, and no vendor-released patch was identified.

Path traversal in the WordEmbedding_LM.load function of deepset-ai FARM through version 0.8.0 lets a local attacker control the embeddings_filename argument - typically by supplying a crafted model package - and read files outside the intended model directory. The flaw is assessed as low severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:R, limited confidentiality impact only), requires local access and a victim to actually load the attacker-influenced input, and affects an end-of-life product the maintainer no longer supports and did not respond about. A public PoC reference has been published, but it is not verified as working exploit code, and no confirmed active exploitation has been reported.