Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that allows local attackers to write arbitrary files by pre-planting symlinks at predictable output paths. Attackers can redirect archive extraction to arbitrary filesystem locations in shared-cache environments, enabling overwrite of sensitive files and potential privilege escalation or code execution.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Attack Requirements
Present
Additional conditions required
Privileges Required
Low
Basic privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v4.0
Weakness Type (CWE)
References 4
https://github.com/huggingface/datasets/commit/ad2d853ae2ce41d8068c23b44c2e2900…
disclosure@vulncheck.com
https://github.com/huggingface/datasets/issues/8296
disclosure@vulncheck.com
https://github.com/huggingface/datasets/pull/8303
disclosure@vulncheck.com
https://www.vulncheck.com/advisories/datasets-symlink-following-arbitrary-file-…
disclosure@vulncheck.com