CVE-2026-75111 Evidently UI Path Traversal via Dataset Materialization Filename

Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system...

CVE-2026-75111

Evidently UI is vulnerable to a path traversal in the dataset materialization endpoint. The filename parameter is not properly validated, allowing unauthenticated attackers to supply traversal sequences or absolute paths to read arbitrary files outside the workspace directory. The accessed file c...

PT-2026-76805

Name of the Vulnerable Software and Affected Versions Evidently UI affected versions not specified Description An issue exists where the software fails to properly validate the filename parameter in the dataset materialization endpoint. This allows unauthenticated attackers to read arbitrary file...

CVE-2026-75111: Improper Limitation of a Pathname to a Restricted Directory

Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system...