CVE-2026-69112 is a path traversal vulnerability affecting Hugging Face Accelerate through version 1.14.0. The vulnerability exists in the load_checkpoint_in_model and load_checkpoint_and_dispatch functions, which fail to sanitize weight_map entries from sharded checkpoint indexes. This allows an attacker to use relative paths containing '../' sequences or absolute paths to access arbitrary files on the filesystem. Additionally, attackers can point shard entries to named pipes, causing indefinite blocking and denial of service conditions.

An attacker with local access and the ability to supply crafted sharded checkpoint indexes can read arbitrary files on the system or cause denial of service by blocking processes indefinitely. The vulnerability does not require privileges and can be triggered with user interaction. The CVSS 4.0 score is 6.9 (medium severity), reflecting the local attack vector, low complexity, no privileges required, but requiring user interaction and having high impact on confidentiality and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid loading untrusted or unauthenticated sharded checkpoint indexes with the affected functions. Monitor vendor communications for updates and apply official patches once released.