CVE-2026-117510 Details

A path traversal vulnerability has been identified in Dexmal Dexbotic versions through 0.2.0, specifically within the gr00tsonic Checkpoint Loader. The issue arises in the load_pretrained_gr00t function, located in dexbotic/model/gr00tsonic/gr00tsonic_arch.py. The vulnerability allows for remote exploitation by manipulating the weight_map argument, which leads to unvalidated loading of out-of-package files into the model, potentially overwriting existing weights with attacker-chosen values.

It is recommended to validate weight_map values before processing them. This includes rejecting absolute paths and any segments that could escape the intended directory, as well as verifying that the resolved path remains within the checkpoint directory. Such checks could prevent the exploitation of this vulnerability by ensuring that only trusted, relative paths are used to load model weights.