CVE-2026-109156

6.3Medium

Published 13 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

6.3Medium

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required
Impact: Limited impact
Weakness: CWE-22

Impact

Remote attackers can read or overwrite local files via path traversal if a user is tricked into processing a malicious environment tarball. They need network access to deliver the payload and user interaction.

Root cause

The _extract_env function in mlserver/env.py extracts archive files without sanitizing member paths.

Affected systems

SeldonIO MLServer up to 1.6.1

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Fix & remediation

No fixed version is currently available; restrict untrusted environment archive uploads and run the MLServer service with minimal filesystem permissions.

shell

$ pip show mlserver

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlserver/env.py of the component environment_tarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-109156