---
id: "CVE-2026-120334"
kind: "vulnerability"
aliases: ["CVE-2026-120334"]
title: "deepset FARM: tokenizer loader lets remote requests traverse file paths"
severity: "medium"
cvss: 5.0
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["farm", "nlp", "package", "python"]
not_affected_if: []
published_at: "2026-11-02T03:17:30+00:00"
first_seen_at: "2026-11-02T03:31:23+00:00"
updated_at: "2026-11-02T03:31:59+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120334", "first_seen_at": "2026-11-02T03:31:23+00:00"}]
---

# deepset FARM: tokenizer loader lets remote requests traverse file paths

deepset FARM up to version 0.8.0 has a path traversal flaw in EmbeddingTokenizer.from_pretrained, where a manipulated vocab_filename argument is not restricted. A remote attacker can use it to reach files outside the intended directory, and a public exploit has been published.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the installed FARM version is `0.8.0` or lower.
- Look for calls to `EmbeddingTokenizer.from_pretrained` that pass user-supplied values as `vocab_filename`.

## Timeline

- 2026-11-02T03:31:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120334

## From the sources

A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.from_pretrained of the file farm/modeling/tokenization.py of the component Tokenizer Loader. Executing a manipulation of the argument vocab_filename can lead to path traversal. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_