CVE-2026-109153

A path traversal vulnerability exists in MosaicML Composer up to version 0.32.1 . The flaw is located in the Checkpoint Extraction component, specifically within the tarball.extractall function of the composer/utils/checkpoint.py file. This vulnerability allows for remote execution of an attack. ...