The TinyZero project contains a critical command injection vulnerability (CWE-78) in its HDFS file operation utilities as of commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 dated 2025-58-24. The vulnerability arises because the _copy() function constructs shell commands using Python f-strings and executes them via os.system() without sanitizing user input. Specifically, user-controlled file path parameters passed through the Hydra configuration framework can inject arbitrary OS commands. This leads to remote code execution with the privileges of the user running the TinyZero training process. The CVSS v3.1 base score is 9.8, reflecting network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level is currently documented.

Successful exploitation allows remote attackers to execute arbitrary operating system commands with the privileges of the TinyZero training process user. This can lead to full system compromise, including unauthorized data access, modification, or destruction, and potential disruption of service. The vulnerability is critical due to its ease of exploitation (network vector, no privileges or user interaction required) and severe impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using vulnerable versions of TinyZero or restrict access to the affected functionality. Review and sanitize all user inputs that may be passed to shell commands, especially file path parameters in the Hydra configuration framework. Consider running the TinyZero training process with minimal privileges to limit potential impact.