Description
Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can redirect archive extraction to arbitrary filesystem locations in shared-cache environments, enabling overwrite of sensitive files and potential privilege escalation or code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
huggingface datasets
Default version status: unaffected
0 to ≤ 5.00affectedad2d853ae2ce41d8068c23b44c2e29004312cceeunaffected
pkg:pypi/datasetsReferences
- https://github.com/huggingface/datasets/issues/8296 ↗
- https://github.com/huggingface/datasets/pull/8303 ↗
- https://github.com/huggingface/datasets/commit/ad2d853ae2ce41d8068c23b44c2e29004312ccee ↗
- https://www.vulncheck.com/advisories/datasets-symlink-following-arbitrary-file-write-via-extractor-extract ↗