CVE-2026-66007

MediumCVSS 6.5/10Last modified Oct 24, 2026

Description

Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted file_name values with directory traversal sequences to read arbitrary local files, which are then embedded into output when save_to_disk or push_to_hub is called.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
huggingface	datasets	<= 5.0.0

References

https://github.com/huggingface/datasets/commit/f989ef9b4cc6c0039a7a82458eebca49e2b58b4bPatch
https://github.com/huggingface/datasets/issues/8324Exploit, Issue Tracking, Vendor Advisory
https://github.com/huggingface/datasets/pull/8325Issue Tracking, Patch
https://www.vulncheck.com/advisories/datasets-path-traversal-via-unsanitized-file-name-metadataExploit, Patch, Third Party Advisory

Timeline

Published: Jul 24, 2026
Last modified: Oct 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-660086.3Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >= 8.2.2 before 8.6.87 disclose Pointer and Relation target class names through Gra CVE-2026-660096.3Parse Server versions >= 9.0.0 before 9.10.0-alpha.5 and >= 8.2.2 before 8.6.86 return GraphQL validation error messages that name required CVE-2026-66014.3A vulnerability has been found in Lagom WHMCS Template up to 2.4.2. This impacts an unknown function of the component Datatables. The manipu CVE-2026-660106.1DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HANDLING.tagNameCheck, al CVE-2026-660113.3ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Att CVE-2026-6601210.0SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth CVE-2026-660139.3OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attacke CVE-2026-660148.8JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an CVE-2026-660157.2An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions. Successfu CVE-2026-660166.7Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privil CVE-2026-660186.5Build readers can access another repository's environment properties. A caller with read access to an ordinary repository can select a reada CVE-2026-66027.3A vulnerability was found in rickxy Hospital Management System up to 88a4290d957dc5bdde8a56e5ad451ad14f7f90f4. Affected is an unknown functi