CVE-2026-117509

A vulnerability was detected in crownpku RasaNLUChi up to 0.12.2. Affected is the function Persistor.decompress of the file rasanlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be...

CVE-2026-117509

The software crownpku Rasa_NLU_Chi versions up to 0.12.2 is vulnerable to a path traversal vulnerability in the Model Persistor component. Specifically, the Persistor._decompress function within the rasa_nlu/persistor.py file allows for such manipulation. This vulnerability can be exploited remot...

CVE-2026-117509 crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal

A vulnerability was detected in crownpku RasaNLUChi up to 0.12.2. Affected is the function Persistor.decompress of the file rasanlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be...

EUVD-2026-111083

A vulnerability was detected in crownpku RasaNLUChi up to 0.12.2. Affected is the function Persistor.decompress of the file rasanlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be...

PT-2026-126636

A vulnerability was detected in crownpku Rasa NLU Chi up to 0.12.2. Affected is the function Persistor. decompress of the file rasa nlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may...