Live › vulnerability › CVE-2026-113738
Go to dashboardA path traversal flaw in the extract_mtp_heads function of a Qwen MTP GGUF pipeline script lets a crafted shard_name argument reach files outside the intended directory. The sources say the attack can be started remotely and that the exploit is public, but no authentication or version details are given.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py in the checkout.ef2b17f2798cd18cd85375080c35a58397ad0d09 (git log -1); the sources say all commits up to it are affected.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extract_mtp_heads of the file qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py of the component MTP weight_map Handler. The manipulation of the argument shard_name leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-113738")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.