Cohere Python SDK Path Traversal in SageMaker Tar Extraction
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Deferred Red Hat: fix deferred
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.
Summary
Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) flaw, CWE-22, in _s3_models_dir_to_tarfile. Unvalidated tarfile.extractall calls allow arbitrary file writes. An attacker who can write model archives to the victim's S3 prefix can use absolute paths or ../ members to overwrite files on the SDK host. The CVSS 4.0 base score is 5.9 (MEDIUM), Red Hat rates it Moderate, and CISA SSVC lists exploitation as none.
Written with Claude Haiku 5.5 from the sources below · 2026-10-29
Description from the CNA
Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to overwrite files on the SDK host.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
No fixed version is listed for cohere-python. Until a fix is released, restrict who can write to the S3 prefix that holds model archives. Red Hat lists no available plan for Lightspeed Core or Red Hat OpenShift AI (RHOAI).
Written with Claude Haiku 5.5 from the sources below · 2026-10-29
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Lightspeed Core | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet: Fix deferred |
Timeline
- 2026-10-11 Threatist record created from CVE-2026-108597
- 2026-10-11 Alias added: GHSA-rg44-2cq2-qx25
- 2026-10-11 Priority changed: MEDIUM → LOW
- 2026-10-14 CISA SSVC decision points changed
- 2026-10-15 Affected versions changed · Red Hat
- 2026-10-15 CVSS score added · Red Hat
References
Sources
- CVE-2026-108597 · CVE Program
- CVE-2026-108597 · NVD
- FIRST EPSS
- GHSA-rg44-2cq2-qx25 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-108597 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences