Jackrong-llm-finetuning-guide Path Traversal Flaws

Path traversal in the Jackrong Finetuning Guide's Qwen MTP GGUF pipeline lets an unauthenticated remote attacker supply a crafted MTP weight_map whose shard_name value contains traversal sequences, causing files outside the intended model directory to be accessed when a victim runs the extract_mtp_heads function. The affected code is qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py through commit ef2b17f2798cd18cd85375080c35a58397ad0d09, distributed as a rolling release with no tagged versions. Publicly available exploit code exists, but impact is limited to low confidentiality, integrity, and availability with required user interaction, and there is no CISA KEV listing at time of analysis.

Path traversal in the qwen-mtp-gguf conversion script within Jackrong-llm-finetuning-guide allows authenticated low-privileged remote attackers to manipulate the weight_map argument and direct file operations outside intended directories, but the victim must run the conversion pipeline. Impact is limited to low confidentiality and integrity effects with no scope change, and exposure is narrow because the affected code is a niche Qwen MTP-to-GGUF conversion utility; publicly available exploit code exists.