Arbitrary File Write via TarSlip in dmlc/gluon-cv
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · CNA. Fix status from CNA and GitHub.
Summary
A vulnerability in the `ImageClassificationDataset.from_csv()` API of the `dmlc/gluon-cv` repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts `tar.gz` files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can exploit this by crafting malicious tar files that, when extracted, can overwrite files on the victim's system via path traversal or faked symlinks.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| dmlc | dmlc/gluon-cv | up to latest | — | No fix listed | CNA |
| — | gluoncv (PyPI) | up to 0.10.0 | — | No fix listed | GHSA-m724-hqmc-ggpx |
- dmlc/gluon-cv Vendordmlc Affected up to latest Fixed in — No fix listed CNA
- gluoncv (PyPI) Vendor— Affected up to 0.10.0 Fixed in — No fix listed GHSA-m724-hqmc-ggpx
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2024-12216
- 2026-10-03 Alias added: GHSA-m724-hqmc-ggpx
References
More dmlc vulnerabilities
- TI-2026-63308 dmlc dgl utils.py _read_torch_data deserialization CVSS 4.0MEDIUM 5.1
Sources
- CVE-2024-12216 · CVE Program
- CVE-2024-12216 · NVD
- FIRST EPSS
- GHSA-m724-hqmc-ggpx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences