{"id":"CVE-2026-66007","aliases":["GHSA-379c-qx7v-6h59","PYSEC-2026-3716"],"url":"https://o3.security/vulnerability/CVE-2026-66007","summary":"Datasets Path Traversal via Unsanitized file_name Metadata","details":"Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted file_name values with directory traversal sequences to read arbitrary local files, which are then embedded into output when save_to_disk or push_to_hub is called.","published":"2026-07-24T14:58:10.035Z","modified":"2026-10-21T02:30:23.294843441Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"datasets","fixedVersion":"5.0.1"}],"fix":{"url":"https://github.com/huggingface/datasets/commit/f989ef9b4cc6c0039a7a82458eebca49e2b58b4b","label":"huggingface/datasets@f989ef9"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/66xxx/CVE-2026-66007.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66007"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/datasets-path-traversal-via-unsanitized-file-name-metadata"},{"type":"REPORT","url":"https://github.com/huggingface/datasets/issues/8324"},{"type":"FIX","url":"https://github.com/huggingface/datasets/commit/f989ef9b4cc6c0039a7a82458eebca49e2b58b4b"},{"type":"FIX","url":"https://github.com/huggingface/datasets/pull/8325"},{"type":"PACKAGE","url":"https://github.com/huggingface/datasets"},{"type":"WEB","url":"https://github.com/pypa/advisory-database/tree/main/vulns/datasets/PYSEC-2026-3716.yaml"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-21T02:30:23.294843441Z"}}