Read the docs
TI-2026-71633 Aliases CVE-2026-109156

Path traversal in SeldonIO MLServer environment tarball handler

Priority LOW 24CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.

Summary

SeldonIO MLServer, with affected versions listed as from 1.6.0 and from 1.6.1, contains a path traversal flaw (CWE-22) in the _extract_env function of mlserver/env.py in the environment_tarball handler. Crafted input can manipulate file paths during extraction. A remote attacker without privileges needs a user to interact with the crafted input. The vendor did not respond to early disclosure.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

Description from the CNA

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlserver/env.py of the component environment_tarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00424 36th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SeldonIOMLServer1.6.0; 1.6.1—No fix listedCNA
  • MLServer VendorSeldonIO Affected 1.6.0; 1.6.1 Fixed in — No fix listed CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:seldonio:mlserver:*:*:*:*:*:*:*:*——SeldonIO
  • cpe:2.3:a:seldonio:mlserver:*:*:*:*:*:*:*:* Versions — — ·SeldonIO

Remediation

The sources list no fixed version for SeldonIO MLServer. Red Hat fixes Red Hat OpenShift AI 3.4 in RHSA-2026:92510, released 2026-10-29.

Written with Claude Haiku 5.5 from the sources below · 2026-10-30

Red Hat 1 advisory

  • RHSA-2026:92510 Released 2026-10-29 · Red Hat rating Critical
    RHOAI 3.4.6 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift AI 3.4Fixed RHSA-2026:92510
Not affected: 2 products
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 3.4

Timeline

  1. 2026-10-13 Threatist record created from CVE-2026-109156
  2. 2026-10-16 Affected versions changed · Red Hat
  3. 2026-10-16 CVSS score added · Red Hat
  4. 2026-10-18 CISA SSVC decision points changed
  5. 2026-10-30 Fix available: RHSA-2026:92510 · Red Hat
  6. 2026-10-30 Fix available: Red Hat OpenShift AI 3.4 · Red Hat

References

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences