PT-2026-111407 · Seldonio · Mlserver
CVSS v3.1
6.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L |
A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extract env of the file mlserver/env.py of the component environment tarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mlserver