CVE-2026-35492 Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a...

CVE-2026-35492

Kedro-Datasets PartitionedDataset has a path traversal vulnerability prior to 9.3.0, where partition IDs were concatenated with the dataset base path without validation, potentially allowing writing outside the dataset directory on local FS or storage backends (S3, GCS, etc.). The issue affects a...

CVE-2026-35492 Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a...

CVE-2026-35492 Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a...

CVE-2026-35492

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a...

CVE-2026-35492: Improper Limitation of a Pathname to a Restricted Directory

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a...

kedro-graphql (>=0.1.2, <=0.4.0), kedro-snowflake (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-35492 via kedro-datasets (1.2.0)

kedro-datasets PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on kedro-datasets and may be impacted: - kedro-graphql =0.1.2, =0.1.0, =0.1.1 Source cves: CVE-2026-35492 Source advisory: OSV:GHSA-CJG8-H5QC-HRJV...

kedro-azureml (>=0.4.1, <=0.8.0), kedro-snowflake (>=0.1.2, <=0.2.1) potentially affected by CVE-2026-35492 via kedro-datasets (2.0.0)

kedro-datasets PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kedro-datasets and may be impacted: - kedro-azureml =0.4.1, =0.1.2, =0.2.1 Source cves: CVE-2026-35492 Source advisory: OSV:GHSA-CJG8-H5QC-HRJV...

kedro-azureml (0.9.0), kedro-graphql (>=1.1.0, <=1.5.1) +4 more potentially affected by CVE-2026-35492 via kedro-datasets (7.0.0)

kedro-datasets PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kedro-datasets and may be impacted: - kedro-azureml 0.9.0 - kedro-graphql =1.1.0, =0.12.2, =0.7.0, =0.1.0, =0.1.3 Source cves: CVE-2026-35492 Source advisory:...

kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file write

Impact PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a partition ID could cause files to be written outside the configured...

GHSA-CJG8-H5QC-HRJV kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file write

Impact PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a partition ID could cause files to be written outside the configured...

Directory Traversal

Overview kedro-datasets is a Kedro-Datasets is where you can find all of Kedro's data connectors. Affected versions of this package are vulnerable to Directory Traversal via the PartitionedDataset component. An attacker can overwrite arbitrary files on the filesystem by supplying partition IDs...

PT-2026-30759

Name of the Vulnerable Software and Affected Versions Kedro-Datasets versions prior to 9.3.0 Description The Kedro-Datasets plugin is susceptible to a path traversal issue in the PartitionedDataset component. Partition IDs were directly concatenated with the dataset base path without proper...