| Title | DT42 BerryNet up to v3.10.2 (master commit 2f13f5b5) Path Traversal |
|---|
| Description | A vulnerability was found in BerryNet up to v3.10.2 and classified as medium 6.5. Affected is the DLModelManager.get_model_meta function of the model package metadata component. The manipulation of the meta.json label argument leads to path traversal (CWE-22). It is possible to launch the attack remotely; user interaction is required because a crafted data-only model package must be installed and loaded by an engine service (bn_tflite, bn_darknet or bn_openvino).
Technical Details
- Affected file/function: berrynet/dlmodelmgr.py / DLModelManager.get_model_meta(); read primitive berrynet/engine/tflite_engine.py / _load_label()
- Vulnerable parameter: label field of meta.json in an installed model package
- Attack vector: Network
- Privileges required: None
- Trigger condition: start an engine service with --model_package; the absolute label value overrides the package directory prefix via os.path.join and the engine opens and reads the attacker-chosen file in full before validating the model file.
Impact
- Confidentiality: High (arbitrary file read into the inference engine; with an attacker-crafted model the contents are reflected in inference results)
- Integrity: None
- Availability: None
CVSS v3.1
Score: 6.5 (Medium)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Timeline
- Discovered: [unknown]
- Vendor notified: [pending]
- Patch released: [pending]
- Public disclosure: [pending]
Countermeasure
Validate path-valued metadata fields in DLModelManager.get_model_meta (reject absolute paths and .. segments, or verify realpath containment inside the package directory) so bn_tflite, bn_darknet and bn_openvino are fixed at once. |
|---|
| Source | ⚠️ https://github.com/DT42/BerryNet/issues/82 |
|---|
| User | Dem0000000 (UID 98743) |
|---|
| Submission | 10/07/2026 15:37 (15 days ago) |
|---|
| Moderation | 10/20/2026 23:39 (13 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 423078 [DT42 BerryNet up to 3.10.2 Model Package Metadata berrynet/dlmodelmgr.py DLModelManager.get_model_meta label path traversal] |
|---|
| Points | 20 |
|---|