CVE-2026-69112

Affected versions of the Hugging Face Accelerate package are vulnerable to Path Traversal and Denial of Service (DoS) due to improper sanitization of `weight_map` entries in sharded checkpoint indexes. The `load_checkpoint_in_model` and `load_checkpoint_and_dispatch` functions fail to sanitize user-supplied `weight_map` entries, allowing the use of relative paths with `../` sequences or absolute paths. An attacker can exploit this by supplying crafted paths to read arbitrary files or by pointing shard entries at named pipes to cause indefinite blocking, resulting in a Denial of Service condition.