CVE-2026-65010 is a symlink-following vulnerability in the huggingface datasets library affecting versions up to and including 5.00. The vulnerability occurs in the Extractor.extract() method, where an attacker with local access can pre-plant symbolic links at known output locations. When archives are extracted, these symlinks cause files to be written to arbitrary filesystem locations, enabling overwriting of sensitive files. This can lead to privilege escalation or code execution in shared-cache environments. The vulnerability was addressed in commit ad2d853, though no explicit vendor advisory or patch link is provided in the input data.

Local attackers can exploit this vulnerability to overwrite arbitrary files on the filesystem by leveraging symbolic links during archive extraction. This may result in privilege escalation or arbitrary code execution if sensitive files are overwritten. The vulnerability affects shared-cache environments where multiple users or processes may interact with the extracted files.

The vulnerability has been fixed in commit ad2d853. Users should upgrade to a version of huggingface datasets that includes this fix (versions later than 5.00). Since no official vendor advisory or patch link is provided, users should verify the fix by checking the project's repository for the referenced commit. Until upgraded, avoid running extraction operations in shared-cache environments with untrusted local users to reduce risk.