Read the docs

allegroai

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

allegroai records in CISA KEV

No allegroai vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-08164 CVE-2025-8917 · GHSA-579p-qf78-fqm2

Path Traversal Leading to Remote Code Execution in allegroai/clearml

Priority MEDIUM 61

A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the `safe_extract` function.

CVSS 3.0MEDIUM 5.8 Local High privileges User interaction EPSS 0.00483 Published 2025-10-05 Fixed in 2.0.2 CWE-22
TI-2026-07375 CVE-2026-8387 · GHSA-mhhg-pjm8-92vh

Relative Path Traversal in allegroai/clearml

Priority MEDIUM 46

A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extracting `.zip` archives using the `ZipFile.extractall()` method in `StorageManager._extract_to_cache()`.

CVSS 3.0LOW 2.4 Network High privileges User interaction EPSS 0.00421 Published 2026-07-01 Fixed in 2.1.6 CWE-23
Open these records in search →