Hugging Face Accelerate Flaw Allows Arbitrary File Read and DoS via Checkpoint Files

A path traversal vulnerability (CVE-2026-69112) has been discovered in Hugging Face Accelerate, affecting all versions up to and including 1.14.0. The flaw stems from the library's failure to sanitize filenames in the weight_map field of sharded checkpoint index files, allowing attackers to supply malicious paths that read arbitrary files from the host filesystem. A secondary attack vector exploits named pipes on Linux to cause indefinite process blocking, resulting in denial of service. The two affected functions — load_checkpoint_in_model and load_checkpoint_and_dispatch — are primary entry points used widely across ML pipelines, which collectively see roughly 27 million downloads per month. No patched version is available yet, and users are advised to manually validate checkpoint index files to reject entries containing parent-directory sequences or absolute paths.