Path Traversal

🗓️ 27 Nov 2025 06:32:26Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 6 Views

ClearML path traversal via unsafe safe_extract links allows outside writes and remote code execution.

Reporter	Title	Published	Views	Family All 13
Huntr	Path traversal, lead to remote code execution	30 Jun 202510:21	–	huntr
CNNVD	clearml 安全漏洞	5 Oct 202500:00	–	cnnvd
CVE	CVE-2025-8917	5 Oct 202510:21	–	cve
Cvelist	CVE-2025-8917 Path Traversal Leading to Remote Code Execution in allegroai/clearml	5 Oct 202510:21	–	cvelist
EUVD	EUVD-2025-32454	5 Oct 202512:30	–	euvd
Github Security Blog	clearml is vulnerable to Path Traversal through its `safe_extract` function	5 Oct 202512:30	–	github
NVD	CVE-2025-8917	5 Oct 202511:16	–	nvd
OSV	GHSA-579P-QF78-FQM2 clearml is vulnerable to Path Traversal through its `safe_extract` function	5 Oct 202512:30	–	osv
Positive Technologies	PT-2025-40805	5 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-8917	7 Oct 202523:13	–	redhatcve

Vulners

Node

clear clearmlRange1.8.0–2.0.1python

clear clearmlMatch0.17.0python

clear clearmlMatch0.17.1python

clear clearmlMatch0.17.2python

clear clearmlMatch0.17.3python

clear clearmlMatch0.17.4python

clear clearmlMatch0.17.5python

clear clearmlMatch0.17.5rc0python

clear clearmlMatch0.17.5rc1python

clear clearmlMatch0.17.5rc2python

clear clearmlMatch0.17.5rc3python

clear clearmlMatch0.17.5rc4python

clear clearmlMatch0.17.5rc5python

clear clearmlMatch0.17.5rc6python

clear clearmlMatch0.17.6rc1python

clear clearmlMatch1.0.0python

clear clearmlMatch1.0.1python

clear clearmlMatch1.0.2python

clear clearmlMatch1.0.2rc0python

clear clearmlMatch1.0.3python

clear clearmlMatch1.0.3rc0python

clear clearmlMatch1.0.3rc1python

clear clearmlMatch1.0.4python

clear clearmlMatch1.0.4rc0python

clear clearmlMatch1.0.4rc1python

clear clearmlMatch1.0.5python

clear clearmlMatch1.0.6rc1python

clear clearmlMatch1.0.6rc2python

clear clearmlMatch1.1.0python

clear clearmlMatch1.1.1python

clear clearmlMatch1.1.2python

clear clearmlMatch1.1.2rc0python

clear clearmlMatch1.1.3python

clear clearmlMatch1.1.3rc0python

clear clearmlMatch1.1.4python

clear clearmlMatch1.1.4rc0python

clear clearmlMatch1.1.5python

clear clearmlMatch1.1.5rc0python

clear clearmlMatch1.1.5rc1python

clear clearmlMatch1.1.5rc2python

clear clearmlMatch1.1.5rc3python

clear clearmlMatch1.1.5rc4python

clear clearmlMatch1.1.5rc5python

clear clearmlMatch1.1.5rc6python

clear clearmlMatch1.1.5rc7python

clear clearmlMatch1.1.6python

clear clearmlMatch1.1.6rc0python

clear clearmlMatch1.10.0python

clear clearmlMatch1.10.0rc0python

clear clearmlMatch1.10.1python

clear clearmlMatch1.10.2python

clear clearmlMatch1.10.3python

clear clearmlMatch1.10.4python

clear clearmlMatch1.10.4rc0python

clear clearmlMatch1.10.4rc1python

clear clearmlMatch1.11.0python

clear clearmlMatch1.11.0rc0python

clear clearmlMatch1.11.1python

clear clearmlMatch1.11.1rc0python

clear clearmlMatch1.11.1rc1python

clear clearmlMatch1.11.1rc2python

clear clearmlMatch1.11.2rc0python

clear clearmlMatch1.12.0python

clear clearmlMatch1.12.1python

clear clearmlMatch1.12.1rc0python

clear clearmlMatch1.12.2python

clear clearmlMatch1.12.2rc0python

clear clearmlMatch1.13.0python

clear clearmlMatch1.13.1python

clear clearmlMatch1.13.2python

clear clearmlMatch1.13.2rc0python

clear clearmlMatch1.13.2rc1python

clear clearmlMatch1.13.2rc2python

clear clearmlMatch1.13.2rc3python

clear clearmlMatch1.13.3rc0python

clear clearmlMatch1.13.3rc1python

clear clearmlMatch1.14.0python

clear clearmlMatch1.14.0rc0python

clear clearmlMatch1.14.1python

clear clearmlMatch1.14.1rc0python

clear clearmlMatch1.14.2python

clear clearmlMatch1.14.2rc0python

clear clearmlMatch1.14.3python

clear clearmlMatch1.14.3rc0python

clear clearmlMatch1.14.4python

clear clearmlMatch1.14.4rc0python

clear clearmlMatch1.14.4rc1python

clear clearmlMatch1.14.5rc0python

clear clearmlMatch1.15.0python

clear clearmlMatch1.15.1python

clear clearmlMatch1.16.0python

clear clearmlMatch1.16.0rc0python

clear clearmlMatch1.16.1python

clear clearmlMatch1.16.2python

clear clearmlMatch1.16.2rc0python

clear clearmlMatch1.16.3python

clear clearmlMatch1.16.3rc0python

clear clearmlMatch1.16.3rc1python

clear clearmlMatch1.16.3rc2python

clear clearmlMatch1.16.4python

clear clearmlMatch1.16.5python

clear clearmlMatch1.16.5rc0python

clear clearmlMatch1.16.5rc1python

clear clearmlMatch1.16.5rc2python

clear clearmlMatch1.17.0python

clear clearmlMatch1.17.0rc0python

clear clearmlMatch1.17.1python

clear clearmlMatch1.17.2rc0python

clear clearmlMatch1.18.0python

clear clearmlMatch1.2.0python

clear clearmlMatch1.2.0rc0python

clear clearmlMatch1.2.0rc1python

clear clearmlMatch1.2.0rc2python

clear clearmlMatch1.2.1python

clear clearmlMatch1.2.1rc0python

clear clearmlMatch1.3.0python

clear clearmlMatch1.3.0rc0python

clear clearmlMatch1.3.0rc1python

clear clearmlMatch1.3.0rc2python

clear clearmlMatch1.3.1python

clear clearmlMatch1.3.1rc0python

clear clearmlMatch1.3.2python

clear clearmlMatch1.3.2rc0python

clear clearmlMatch1.3.2rc1python

clear clearmlMatch1.3.2rc2python

clear clearmlMatch1.3.2rc3python

clear clearmlMatch1.3.2rc4python

clear clearmlMatch1.3.3rc0python

clear clearmlMatch1.3.3rc1python

clear clearmlMatch1.3.3rc2python

clear clearmlMatch1.4.0python

clear clearmlMatch1.4.1python

clear clearmlMatch1.4.1rc0python

clear clearmlMatch1.4.2rc0python

clear clearmlMatch1.4.2rc1python

clear clearmlMatch1.5.0python

clear clearmlMatch1.6.0python

clear clearmlMatch1.6.1python

clear clearmlMatch1.6.2python

clear clearmlMatch1.6.2rc0python

clear clearmlMatch1.6.3python

clear clearmlMatch1.6.3rc0python

clear clearmlMatch1.6.3rc1python

clear clearmlMatch1.6.4python

clear clearmlMatch1.6.5rc0python

clear clearmlMatch1.6.5rc1python

clear clearmlMatch1.6.5rc2python

clear clearmlMatch1.7.0python

clear clearmlMatch1.7.0rc0python

clear clearmlMatch1.7.0rc1python

clear clearmlMatch1.7.1python

clear clearmlMatch1.7.1rc0python

clear clearmlMatch1.7.1rc1python

clear clearmlMatch1.7.1rc2python

clear clearmlMatch1.7.2python

clear clearmlMatch1.7.2rc0python

clear clearmlMatch1.7.2rc1python

clear clearmlMatch1.7.2rc2python

clear clearmlMatch1.7.3rc0python

clear clearmlMatch1.7.3rc1python

clear clearmlMatch1.8.0python

clear clearmlMatch1.8.1python

clear clearmlMatch1.8.1rc0python

clear clearmlMatch1.8.2python

clear clearmlMatch1.8.3python

clear clearmlMatch1.8.4rc0python

clear clearmlMatch1.8.4rc1python

clear clearmlMatch1.8.4rc2python

clear clearmlMatch1.9.0python

clear clearmlMatch1.9.1python

clear clearmlMatch1.9.1rc0python

clear clearmlMatch1.9.2python

clear clearmlMatch1.9.2rc0python

clear clearmlMatch1.9.2rc1python

clear clearmlMatch1.9.2rc2python

clear clearmlMatch1.9.3python

clear clearmlMatch2.0.0python

clear clearmlMatch2.0.0rc0python

clear clearmlMatch2.0.0rc1python

clear clearmlRange0.0.0a0–2.0.1python

Source	Link
github	www.github.com/clearml/clearml/commit/64fb2bcbdbb87a74af90dd723d5ef4a99fceeb73
huntr	www.huntr.com/bounties/588fcdd1-fea4-4cc2-a9f8-851701dcb576
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-8917
github	www.github.com/clearml/clearml
github	www.github.com/allegroai/clearml/commit/64fb2bcbdbb87a74af90dd723d5ef4a99fceeb73

22 Jun 2026 16:39Current

8.2High risk

Vulners AI Score8.2

CVSS 35.8

EPSS0.00269

SSVC