CVE-2026-114040

Name of the Vulnerable Software and Affected Versions DT42 BerryNet versions prior to 3.10.3

Description Remote path traversal is possible within the Model Package Metadata Handler component. The issue exists in the DLModelManager.get model meta() function located in the berrynet/dlmodelmgr.py file, where improper handling of the label argument allows an attacker to access files outside the intended directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the DLModelManager.get model meta() function to minimize the risk of exploitation.