Live › vulnerability › CVE-2026-117510
Go to dashboardDexbotic 0.2.0 (and main as of the report) load_pretrained_gr00t joins each weight_map value from a checkpoint's model.safetensors.index.json onto the checkpoint dir with os.path.join, with no containment check. A crafted checkpoint with an absolute or ../ shard path makes the loader open safetensors files elsewhere on disk and write their tensors into the model, silently, so the policy can be poisoned. The main impact is integrity. Confidentiality impact is low: an error oracle tells whether a path exists, and tensors can leak if the poisoned model is later published. A public PoC exists and the project has not responded.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Teams that run Dexbotic 0.2.0 or earlier and pass a weight_map value that can be influenced from outside, such as a request field or an uploaded config, are exposed. Projects that load only fixed, trusted checkpoints with hardcoded paths are less exposed. The sources do not say whether a patch exists, and the project has not responded to the report.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| dexbotic | pypi | <= 0.2.0 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr00t of the file dexbotic/model/gr00tsonic/gr00tsonic_arch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weight_map causes path traversal. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-117510")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.