Description
A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted early about this disclosure.
Related CPE's
Could not find any relations
References
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
6.3 · Medium
Information
Source identifier
Vulnerability status
Deferred
Published
2026-10-13T11:17:14.323Z
3 hours agoLast modified
2026-10-13T13:29:12.567Z
1 hour ago