A flaw exists in the validate_indexed_tensors function of the qwen_mtp_gguf_pipeline.py script used by the Jackrong‑llm‑finetuning‑guide project. An attacker can supply a manipulated weight_map argument that causes the function to resolve and open file paths outside a intended directory, enabling the reading of arbitrary files on the host. This path traversal vulnerability is assigned a CVSS score of 5.1, indicating a moderate impact that can compromise confidentiality and potentially aid further exploitation.

All clones or Docker images of the Jackrong‑llm‑finetuning‑guide that include code up to commit ef2b17f2798cd18cd85375080c35a58397ad0d09 are affected. Because the project uses a rolling‑release model, there is no fixed version number, but any instance that has not been updated beyond that patch commit remains vulnerable.

The EPSS score of < 1 % suggests that exploitation is unlikely in the wild, and the vulnerability is not listed in the CISA KEV catalog. However, a proof‑of‑concept exploit has been published, and the attack may be performed remotely by delivering a crafted weight_map argument to the vulnerable function. The attack does not require arbitrary code execution beyond invoking the script with malicious input, so the main risk lies in potential data disclosure. Overall, the risk remains moderate, with a low probability of exploitation but potentially serious consequences if it occurs.