CVE-2026-109156

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...

CVE-2026-109156 SeldonIO MLServer environment_tarball env.py _extract_env path traversal

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...

CVE-2026-109156 SeldonIO MLServer environment_tarball env.py _extract_env path traversal

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...

CVE-2026-109156

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...

CVE-2026-109156

A path traversal vulnerability exists in SeldonIO MLServer up to version 1.6.1 . The flaw is located within the _extract_env function of the mlserver/env.py file, specifically involving the environment_tarball Handler. This issue allows for remote manipulation leading to unauthorized path access....

EUVD-2026-98452

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...

CVE-2026-109156: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...

Seldon MLServer path traversal vulnerability

Seldon MLServer versions 1.6.1 and earlier have a path traversal vulnerability. This vulnerability stems from improper handling of the extractenv function in the environmenttarball Handler component. It may lead to path traversal attacks, and attackers can launch these attacks remotely...