CVE-2026-65010
Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can redirect archive extraction to arbitrary filesystem locations in shared-cache environments, enabling overwrite of sensitive files and potential privilege escalation or code execution.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.6
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.17%
- CWE
- CWE-61
- Published
- 2026-07-23
- Last modified
- 2026-07-24
Affected products
- huggingface datasets
- huggingface datasets
Weakness type
Related vulnerabilities
- CVE-2026-57825 — In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed...
- CVE-2026-79939 — Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink)...
- CVE-2026-75038 — Predictable temporary file in /tmp allows symlink attack in LACT
- CVE-2026-55168 — Runtipi: Authenticated arbitrary file write via backup restore symlink planting
- CVE-2026-63125 — Incus vulnerable to root RCE via image backup.yaml symlink
- CVE-2026-64846 — Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature
- CVE-2026-32657 — Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell...
- CVE-2026-47766 — crun follows rootfs /dev symlink while creating default devices