Description
A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr00t of the file dexbotic/model/gr00tsonic/gr00tsonic_arch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weight_map causes path traversal. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-27
Score: 5.3 Medium
EPSS: n/a
KEV: No
Impact: Path Traversal
Action: Patch Now
AI Analysis

Impact

Dexmal Dexbotic up to version 0.2.0 contains a path traversal flaw in the load_pretrained_gr00t function of gr00tsonic_arch.py; by manipulating the weight_map argument, an attacker can read or potentially execute arbitrary files that the Dexbotic process can access. The CVSS score is 5.3, indicating a moderate risk, and the flaw is directly exploitable.

Affected Systems

The vulnerability affects Dexmal Dexbotic, specifically the gr00tsonic Checkpoint Loader component in the dexbotic/model/gr00tsonic/gr00tsonic_arch.py file. All releases up to and including 0.2.0 are impacted. The product is identified by the CPE cpe:2.3:a:dexmal:dexbotic:*:*:*:*:*:*:*:*, and references include the Dexbotic GitHub repository and issue tracker at https://github.com/dexmal/dexbotic/issues/103.

Risk and Exploitability

The exploit has been published and can be used remotely; EPSS information is not available and the vulnerability is not listed in the CISA KEV catalog. A remote attacker can trigger the flaw by sending a crafted weight_map value to the load_pretrained_gr00t endpoint, exploiting the lack of input validation (CWE-22). The attack path relies on the application logic that resolves the supplied path without sanitizing relative components, thereby enabling traversal into arbitrary directories within the execution environment.

Generated by OpenCVE AI on October 27, 2026 at 18:56 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Dexmal Dexbotic to a version that removes the path traversal flaw when a vendor patch is released or consult the vendor for an advisory.
  • If an update is unavailable, restrict external access to the load_pretrained_gr00t endpoint by placing Dexbotic behind a firewall or limiting API usage to trusted clients.
  • Modify the application to perform strict path canonicalization or whitelist allowed directories for the weight_map argument, rejecting any input containing '..' or absolute paths to prevent traversal.

Generated by OpenCVE AI on October 27, 2026 at 18:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
Description A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr00t of the file dexbotic/model/gr00tsonic/gr00tsonic_arch.py of the component gr00tsonic Checkpoint Loader. This manipulation of the argument weight_map causes path traversal. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Title Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal
First Time appeared Dexmal
Dexmal dexbotic
Weaknesses CWE-22
CPEs cpe:2.3:a:dexmal:dexbotic:*:*:*:*:*:*:*:*
Vendors & Products Dexmal
Dexmal dexbotic
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Dexmal Dexbotic
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-27T15:45:17.291Z

Reserved: 2026-10-27T09:00:35.155Z

Link: CVE-2026-117510

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-27T16:17:30.867

Modified: 2026-10-27T16:17:30.867

Link: CVE-2026-117510

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T19:30:09Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')