CVE-2026-124589 Details

A path traversal vulnerability has been identified in lxtGH OMG-Seg versions prior to commit f3b26b609bae919760cd3ccf09c36179bb8624a0. The issue arises in the MoE Shard Checkpoint Loader, specifically within the function load_state_dict_into_model, located in omg_llava/xtuner/utils/handle_moe_load_and_save.py. The vulnerability allows for remote exploitation by manipulating the weight_map argument, leading to unauthorized file access outside the intended directory.

It is recommended to validate weight_map values in the load_state_dict_into_model function before joining them onto the checkpoint directory path. This validation should reject absolute paths and any segments that could traverse up the directory structure, ensuring that only safe, relative paths are accepted. An interim workaround is to manually check the index of MoE shard checkpoints before loading them.