Accelerate
Monthly
Path traversal in Hugging Face Accelerate through 1.14.0 exposes two distinct attack outcomes when a user loads a crafted sharded checkpoint: sensitive file disclosure via relative (../) or absolute path entries in the weight_map index, and indefinite process blocking via named pipe references enabling denial of service. A publicly available proof-of-concept exists at GitHub issue #4067, reported by VulnCheck. With no system-level privileges required (PR:N per CVSS 4.0), this is a supply chain risk for any ML practitioner who loads untrusted model checkpoints - particularly from public model registries - without needing any foothold on the target system beyond delivering the malicious checkpoint.
Unauthorized plugin installation in the ThemeGrill Accelerate WordPress theme (versions up to and including 1.5.3) is possible because the enqueue_scripts() function performs no WordPress capability check before triggering ThemeGrill Demo Importer plugin installation. Any user holding at least a Subscriber-level account on the affected site can exploit this to install and activate an additional plugin, expanding the attack surface. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
Path traversal in Hugging Face Accelerate through 1.14.0 exposes two distinct attack outcomes when a user loads a crafted sharded checkpoint: sensitive file disclosure via relative (../) or absolute path entries in the weight_map index, and indefinite process blocking via named pipe references enabling denial of service. A publicly available proof-of-concept exists at GitHub issue #4067, reported by VulnCheck. With no system-level privileges required (PR:N per CVSS 4.0), this is a supply chain risk for any ML practitioner who loads untrusted model checkpoints - particularly from public model registries - without needing any foothold on the target system beyond delivering the malicious checkpoint.
Unauthorized plugin installation in the ThemeGrill Accelerate WordPress theme (versions up to and including 1.5.3) is possible because the enqueue_scripts() function performs no WordPress capability check before triggering ThemeGrill Demo Importer plugin installation. Any user holding at least a Subscriber-level account on the affected site can exploit this to install and activate an additional plugin, expanding the attack surface. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.