CVE-2026-65010

Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can redirect archive extraction to arbitrary filesystem locations in shared-cache environments, enabling overwrite of sensitive files and potential privilege escalation or code execution.

CVSS v3 6.6 MEDIUM

6.6^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.3 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/huggingface/datasets/commit/ad2d853ae2ce41d8068c23b44c2e29004312ccee
https://github.com/huggingface/datasets/issues/8296
https://github.com/huggingface/datasets/pull/8303
https://www.vulncheck.com/advisories/datasets-symlink-following-arbitrary-file-write-via-extractor-extract

Configurations

No configuration.

History

24 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Conjuntos de datos hasta la versión 5.00, corregida en el commit ad2d853, contiene una vulnerabilidad de seguimiento de enlaces simbólicos en Extractor.extract() que permite a atacantes locales escribir archivos arbitrarios colocando previamente enlaces simbólicos en rutas de salida predecibles. Los atacantes pueden redirigir la extracción de archivos a ubicaciones arbitrarias del sistema de archivos en entornos de caché compartida, lo que permite la sobrescritura de archivos sensibles y una potencial escalada de privilegios o ejecución de código.

Information

Published : 2026-07-23 19:17

Updated : 2026-10-24 13:10

NVD link : CVE-2026-65010

Mitre link : CVE-2026-65010

CVE.ORG link : CVE-2026-65010

JSON object : View

Products Affected

No product.

CWE

CWE-61

UNIX Symbolic Link (Symlink) Following

{"id": "CVE-2026-65010", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-65010", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-23T19:09:45.573671Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 1.3}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 4.4, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/huggingface/datasets", "vendor": "huggingface", "product": "datasets", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "5.00"}, {"status": "unaffected", "version": "ad2d853ae2ce41d8068c23b44c2e29004312ccee", "versionType": "git"}], "packageURL": "pkg:pypi/datasets", "defaultStatus": "unaffected"}]}], "published": "2026-07-23T19:17:03.890", "references": [{"url": "https://github.com/huggingface/datasets/commit/ad2d853ae2ce41d8068c23b44c2e29004312ccee", "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/huggingface/datasets/issues/8296", "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/huggingface/datasets/pull/8303", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/datasets-symlink-following-arbitrary-file-write-via-extractor-extract", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-61"}]}], "descriptions": [{"lang": "en", "value": "Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can redirect archive extraction to arbitrary filesystem locations in shared-cache environments, enabling overwrite of sensitive files and potential privilege escalation or code execution."}, {"lang": "es", "value": "Conjuntos de datos hasta la versi\u00f3n 5.00, corregida en el commit ad2d853, contiene una vulnerabilidad de seguimiento de enlaces simb\u00f3licos en Extractor.extract() que permite a atacantes locales escribir archivos arbitrarios colocando previamente enlaces simb\u00f3licos en rutas de salida predecibles. Los atacantes pueden redirigir la extracci\u00f3n de archivos a ubicaciones arbitrarias del sistema de archivos en entornos de cach\u00e9 compartida, lo que permite la sobrescritura de archivos sensibles y una potencial escalada de privilegios o ejecuci\u00f3n de c\u00f3digo."}], "lastModified": "2026-10-24T13:10:00.147", "sourceIdentifier": "disclosure@vulncheck.com"}