CVE-2026-111170— kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name
Quick assessment
Affected
kedro-org kedro-datasets
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Kedro-datasets 从 9.3.0 到 9.6.0 版本中的 MatplotlibDataset.save() 方法存在路径穿越漏洞。攻击者通过提供绝对路径的绘图文件名，可以将文件写入到数据集目录之外的位置。由于 validate_sub_path() 函数会去除路径前导的斜杠，而 pathlib 的 join 操作会丢弃基路径，因此攻击者可以在该进程拥有写权限的任何位置创建或覆盖文件。
Possible ATT&CK Techniques 1 AI
T1048.001 · Exfiltration Over Symmetric Encrypted Non-C2 ProtocolAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| kedro-org | kedro-datasets | 9.3.0≤ 9.6.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-111170
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name
Source: CVE Program / CVE List V5
Vulnerability Description
kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validate_sub_path() strips leading slashes while pathlib's join discards the base path, attackers can create or overwrite files anywhere the process can write.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| kedro-org | kedro-datasets | 9.3.0 ~ 9.6.0 | - |
|
II. Public POCs for CVE-2026-111170
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-111170
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-111170 (3)
-
-
🔗 fix(datasets): Reject absolute paths for plots by ankatiyar · Pull Request #1544 · kedro-org/kedro-plugins issue-tracking technical-description patch
-
Vendor Advisories for CVE-2026-111170 (1)
Other References for CVE-2026-111170 (1)
IV. Related Vulnerabilities
Same vendor: kedro-org
-
CVE-2026-62997
Kedro-Datasets: Remote code execution in experimental `PyTor -
CVE-2026-3840
Path Traversal in kedro-org/kedro -
CVE-2026-35492
Kedro-Datasets has a path traversal vulnerability in Partiti -
CVE-2026-35171
Arbitrary Code Execution via Malicious Logging Configuration -
CVE-2026-35167
Kedro has a path traversal in versioned dataset loading via
Same weakness: CWE-22
-
CVE-2026-103896
10Web Booster <= 2.34.5 - Unauthenticated Limited File Write -
CVE-2026-93767
Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Travers -
CVE-2026-109221
Groundhogg <= 4.9.3 - Authenticated (Sales Representative+) -
CVE-2026-104769
Debloat <= 1.3.0 - Unauthenticated Arbitrary File Read via ' -
CVE-2026-84823
Org.wildfly.core: wildfly: path traversal in take-snapshot d
V. Comments for CVE-2026-111170
No comments yet