CVE-2026-124999 | braindecode up to 1.8.2 Hub Integration base.py EEGModuleMixin._from_pretrained filename path traversal (Issue 1440)

November 9, 2026 Yanac

A vulnerability was found in braindecode up to 1.8.2. It has been declared as critical. This affects the function EEGModuleMixin._from_pretrained of the file braindecode/models/base.py of the component Hub Integration. Such manipulation of the argument filename leads to path traversal.

This vulnerability is documented as CVE-2026-124999. The attack can be executed remotely. Additionally, an exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More