CVE-2026-62239
Medium
Description
FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the download_and_copy() function within hopper/setup.py that extracts NVIDIA toolchain archives without validating symlinks or filtering tar members. A local attacker can pre-plant a symlink in the predictable cache directory to redirect extracted binaries to an attacker-chosen location, enabling arbitrary file write with victim privileges during build time.
SeverityMedium
CVSS6.6
Exploit probability—
ProductDao-ailab Flash-attention
PublishedJul 13, 2026
First seenJul 13, 2026
Weakness typeCWE-59Improper link resolution
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Dao-AILab flash-attention | v ≤ 2.8.3.post1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.