CVE-2026-111170

MediumCVSS 6.5

Published: 15/10/2026(UTC)Translated: 16/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validate_sub_path() strips leading slashes while pathlib's join discards the base path, attackers can create or overwrite files anywhere the process can write.

Risk Assessment

An attacker can create or overwrite files anywhere the process has write access, potentially leading to data corruption or code execution.

Recommendation

Upgrade kedro-datasets beyond 9.6.0 and validate plot names by rejecting absolute paths.

Other vulnerabilities in kedro-datasets

CVE-2026-62997High
Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with torch.load without enforcing weights_only=True, and user-supplied load_args are silently dropped. On PyTorch versions earlier than 2.6, a malicious pickle-backed model from an attacker-influenced shared registry, downloaded checkpoint, or partitioned external source can execute arbitrary code when a Kedro pipeline loads it.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS