| 제목 | mosaicml composer 0.32.1 Path Traversal |
|---|
| 설명 | mosaicml composer up to 0.32.1 is vulnerable to path traversal (tar-slip) during checkpoint loading (CWE-22). The checkpoint extraction uses os.path.join(local_path, os.path.relpath(...)) without any containment check, allowing a malicious checkpoint file to write arbitrary files outside the target directory on worker nodes. In distributed training environments, this may lead to file overwrite on all training nodes. CVSS 8.9 High (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H). Researcher: mohammad adnan (cystack.ps redteam). |
|---|
| 원천 | ⚠️ https://github.com/mosaicml/composer/issues/3942 |
|---|
| 사용자 | Anonymous User |
|---|
| 제출 | 2026. 09. 15. AM 12:25 (1 월 ago) |
|---|
| 모더레이션 | 2026. 10. 12. PM 01:44 (28 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 416887 [MosaicML Composer 까지 0.32.1 Checkpoint Extraction checkpoint.py tarball.extractall 디렉토리 순회] |
|---|
| 포인트들 | 20 |
|---|