R6410418 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW R6410418 CVE published 2026-10-21

CVE-2026-113737

A path traversal vulnerability was found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09, affecting the function validate_indexed_tensors of the file qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py. This issue allows remote attackers to manipulate the argument weight_map, potentially leading to path traversal attacks. The exploit has been published and may be used. [truncated]