{"id":"PYSEC-2026-3716","details":"Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted file_name values with directory traversal sequences to read arbitrary local files, which are then embedded into output when save_to_disk or push_to_hub is called.","aliases":["CVE-2026-66007"],"modified":"2026-08-19T13:45:02.994125715Z","published":"2026-07-24T15:19:07.493Z","references":[{"type":"REPORT","url":"https://github.com/huggingface/datasets/issues/8324"},{"type":"FIX","url":"https://github.com/huggingface/datasets/commit/f989ef9b4cc6c0039a7a82458eebca49e2b58b4b"},{"type":"FIX","url":"https://github.com/huggingface/datasets/pull/8325"},{"type":"FIX","url":"https://www.vulncheck.com/advisories/datasets-path-traversal-via-unsanitized-file-name-metadata"}],"affected":[{"package":{"name":"datasets","ecosystem":"PyPI","purl":"pkg:pypi/datasets"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1"}]}],"versions":["0.0.9","1.0.0","1.0.1","1.0.2","1.1.0","1.1.1","1.1.2","1.1.3","1.10.0","1.10.1","1.10.2","1.11.0","1.12.0","1.12.1","1.13.0","1.13.1","1.13.2","1.13.3","1.14.0","1.15.0","1.15.1","1.16.0","1.16.1","1.17.0","1.18.0","1.18.1","1.18.2","1.18.3","1.18.4","1.2.0","1.2.1","1.3.0","1.4.0","1.4.1","1.5.0","1.6.0","1.6.1","1.6.2","1.7.0","1.8.0","1.9.0","2.0.0","2.1.0","2.10.0","2.10.1","2.11.0","2.12.0","2.13.0","2.13.1","2.13.2","2.14.0","2.14.1","2.14.2","2.14.3","2.14.4","2.14.5","2.14.6","2.14.7","2.15.0","2.16.0","2.16.1","2.17.0","2.17.1","2.18.0","2.19.0","2.19.1","2.19.2","2.2.0","2.2.1","2.2.2","2.20.0","2.21.0","2.3.0","2.3.1","2.3.2","2.4.0","2.5.0","2.5.1","2.5.2","2.6.0","2.6.1","2.6.2","2.7.0","2.7.1","2.8.0","2.9.0","3.0.0","3.0.1","3.0.2","3.1.0","3.2.0","3.3.0","3.3.1","3.3.2","3.4.0","3.4.1","3.5.0","3.5.1","3.6.0","4.0.0","4.1.0","4.1.1","4.2.0","4.3.0","4.4.0","4.4.1","4.4.2","4.5.0","4.6.0","4.6.1","4.7.0","4.8.0","4.8.1","4.8.2","4.8.3","4.8.4","4.8.5","5.0.0"],"ecosystem_specific":{},"database_specific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/datasets/PYSEC-2026-3716.yaml"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"}]}