CVE-2026-109156 in MLServer
Prediction
by VulDB Data Team • 10/12/2026
A vulnerability has been found in <a href="/product/seldonio:mlserver">SeldonIO MLServer up to 1.6.1</a>. Affected is the function <code>_extract_env</code> of the file <em>mlserver/env.py</em> of the component <em>environment_tarball Handler</em>. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.