A command injection flaw exists in the TinyZero project’s HDFS file operation utilities, where user‑controlled file paths are interpolated directly into shell commands without sanitization. An attacker can supply a crafted path via the Hydra configuration framework, causing the _copy() function to execute arbitrary OS commands. This yields remote code execution with the privileges of the process that runs TinyZero training. The vulnerability is identified as CWE‑78.

The flaw resides in TinyZero, specifically the HDFS utilities added in the commit 6652a63c57fa7e5ccde3fc9c598c7176ff15b839 (2025‑58‑24). It affects any deployment of TinyZero that utilizes these utilities and processes file paths received from external configuration sources. The affected version information is not explicitly enumerated beyond the commit reference.

The vulnerability has a CVSS score of 9.8, indicating a critical severity, and an EPSS score of less than 1%, suggesting a low probability of exploitation at the current time. It is not listed in CISA’s KEV catalog. This command‑injection flaw allows remote code execution with the privileges of the TinyZero training process. The attack vector is through the Hydra configuration framework, where an attacker can supply a malicious file path that is interpolated into an os.system call. The high CVSS score and potential impact warrant immediate attention and remediation.