Read the docs

evidentlyai

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

evidentlyai records in CISA KEV

No evidentlyai vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 44

Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00572 Published 2026-08-17 No fix listed CWE-22
Open these records in search →