TensorZero up to 2026.5.x Object Storage /internal/object_storage storage_path information disclosure

Summaryinfo

A vulnerability identified as problematic has been detected in TensorZero up to 2026.5.x. This vulnerability affects unknown code of the file /internal/object_storage of the component Object Storage. Performing a manipulation of the argument storage_path results in information disclosure. This vulnerability is identified as CVE-2026-54457. The attack can be initiated remotely. There is not any exploit available.

Detailsinfo

A vulnerability, which was classified as problematic, was found in TensorZero up to 2026.5.x. This affects some unknown functionality of the file /internal/object_storage of the component Object Storage. The manipulation of the argument storage_path with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. The summary by CVE is:

TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation. Prior to 2026.6.0, the TensorZero Gateway /internal/object_storage endpoint accepts a caller-supplied JSON storage_path parameter that dynamically overrides the [object_storage] configuration. Selecting the filesystem storage type allows arbitrary files on the gateway filesystem to be read, including credential files. Selecting the s3_compatible storage type causes outbound object-storage requests to attacker-chosen internal or cloud-metadata endpoints. Exploitation requires access to the gateway, which can be authenticated or unauthenticated depending on deployment configuration. This issue is fixed in version 2026.6.0.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-54457 since 06/15/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

Upgrading to version 2026.6.0 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• TensorZero

Version

• 2026.0
• 2026.1
• 2026.2
• 2026.3
• 2026.4
• 2026.5

Website

• Product: https://github.com/tensorzero/tensorzero/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion