CVE-2026-109153

A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted...

CVE-2026-109153 MosaicML Composer Checkpoint Extraction checkpoint.py tarball.extractall path traversal

A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted...

CVE-2026-109153

A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted...

EUVD-2026-98450

A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted...

CVE-2026-109153

A path traversal vulnerability exists in MosaicML Composer up to version 0.32.1 . The flaw is located in the Checkpoint Extraction component, specifically within the tarball.extractall function of the composer/utils/checkpoint.py file. This vulnerability allows for remote execution of an attack. ...

CVE-2026-109153 MosaicML Composer Checkpoint Extraction checkpoint.py tarball.extractall path traversal

A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted...

PT-2026-111405

Name of the Vulnerable Software and Affected Versions MosaicML Composer versions prior to 0.32.2 Description A path traversal issue exists in the Checkpoint Extraction component within the tarball.extractall function of the composer/utils/checkpoint.py file. This flaw allows a remote attacker to...

CVE-2026-109153: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted...

Databricks Mosaic Research Composer path traversal vulnerability

Databricks Mosaic Research Composer version 0.32.1 has a path traversal vulnerability. This vulnerability arises from the tarball.extractall function in the Composer/utils/checkpoint.py file, which allows for path traversal when operating on the Checkpoint Extraction component. Attackers can...