The Jackrong LLM Finetuning guide contains a path‑traversal flaw in the extract_mtp_heads function of the qwen‑mtp‑gguf pipeline. By supplying a crafted shard_name value, an attacker can cause the function to open files outside the intended directory, potentially allowing access to files beyond the intended scope. The vulnerability is a classic example of CWE‑22 and is rated CVSS 5.3, indicating a moderate level of severity.

The affected product is the Jackrong LLM Finetuning guide (R6410418). The flaw exists in all released versions up to the commit ef2b17f2798cd18cd85375080c35a58397ad0d09. Because the project uses a rolling release model, no specific version numbers for fixed releases are available.

The EPSS score of less than 1 % suggests a low likelihood of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. The exploit can be launched remotely if the function is exposed via a user‑controlled interface. An attacker with control over the shard_name parameter could read files outside the intended directory, potentially exposing sensitive data. Organizations using this guide should consider the risk moderate and monitor for any new patches or exploits.