Read the docs
TI-2022-16345 Aliases CVE-2022-35918GHSA-v4hr-4jpx-56gc

Streamlit directory traversal vulnerability

Priority LOW 32CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-22 and the CVSS impact.

Summary

Streamlit is a data oriented application development framework for python. Users hosting Streamlit app(s) that use custom components are vulnerable to a directory traversal attack that could leak data from their web server file-system such as: server logs, world readable files, and potentially other sensitive information. An attacker can craft a malicious URL with file paths and the streamlit server would process that URL and return the contents of that file. This issue has been resolved in version 1.11.1. Users are advised to upgrade. There are no known workarounds for this issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01767 78th percentileScored 2026-11-07
Fix Fixed streamlit (streamlit): 1.11.1streamlit (PyPI): 1.11.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Snowflakestreamlit0.63.0 to before 1.11.11.11.1Patch availableCNA
—streamlit (PyPI)0.63.0 to before 1.11.11.11.1Patch availableGHSA-v4hr-4jpx-56gc
  • streamlit VendorSnowflake Affected 0.63.0 to before 1.11.1 Fixed in 1.11.1 Patch available CNA
  • streamlit (PyPI) Vendor— Affected 0.63.0 to before 1.11.1 Fixed in 1.11.1 Patch available GHSA-v4hr-4jpx-56gc

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:snowflake:streamlit:*:*:*:*:*:*:*:*0.63.0 to before 1.11.1VulnerableSnowflake
  • cpe:2.3:a:snowflake:streamlit:*:*:*:*:*:*:*:* Versions 0.63.0 to before 1.11.1 Vulnerable ·Snowflake

Remediation

  • Fix · CNA streamlit (streamlit) Fixed in 1.11.1
  • Fix · GHSA-v4hr-4jpx-56gc streamlit (PyPI) Fixed in 1.11.1 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-35918
  2. 2026-10-03 Alias added: GHSA-v4hr-4jpx-56gc

References

Patch 1

Advisory 2

Other 2

  • TI-2026-09272 Streamlit Palette hashing.py weak hash CVSS 4.0LOW 2.0
  • TI-2024-28442 Streamlit Path Traversal Security Vulnerability on Windows CVSS 3.1MEDIUM 6.5
  • TI-2023-12222 Streamlit Cross-site Scripting vulnerability CVSS 3.1MEDIUM 6.1
  • TI-2026-26062 Streamlit on Windows has Unauthenticated SSRF Vulnerability (NTLM Credential Exposure) CVSS 3.1MEDIUM 4.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences