CVE-2026-35492
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
In Kedro-Datasets prior to 9.3.0, PartitionedDataset is vulnerable to path traversal because partition IDs are concatenated directly with the base path without validation. A malicious partition ID containing .. components can cause files to be written outside the configured directory, potentially overwriting arbitrary files.
Risk Assessment
An attacker could overwrite critical files on the filesystem, potentially leading to data corruption or malicious code execution.
Recommendation
Upgrade Kedro-Datasets to version 9.3.0, which fixes the issue.
Other vulnerabilities in Kedro-Datasets
See all- CVE-2026-111170Medium
kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validate_sub_path() strips leading slashes while pathlib's join discards the base path, attackers can create or overwrite files anywhere the process can write.
- CVE-2026-62997High
Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_experimental.pytorch.PyTorchDataset in kedro-datasets loads .pt model files with torch.load without enforcing weights_only=True, and user-supplied load_args are silently dropped. On PyTorch versions earlier than 2.6, a malicious pickle-backed model from an attacker-influenced shared registry, downloaded checkpoint, or partitioned external source can execute arbitrary code when a Kedro pipeline loads it.
Original NVD description (English source)
Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a partition ID could cause files to be written outside the configured dataset directory, potentially overwriting arbitrary files on the filesystem. Users of PartitionedDataset with any storage backend (local filesystem, S3, GCS, etc.) are affected. This vulnerability is fixed in 9.3.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS