Path traversal in DT42 BerryNet model package metadata handler
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.
Summary
DT42 BerryNet up to 3.10.2 contains a path traversal flaw (CWE-22) in the get_model_meta function of its Model Package Metadata Handler. Manipulating the label argument lets a remote attacker with low privileges traverse outside the intended directory, and user interaction is required. A public exploit has been disclosed and may be used.
Written with Claude Haiku 5.5 from the sources below · 2026-10-28
Description from the CNA
A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get_model_meta of the file berrynet/dlmodelmgr.py of the component Model Package Metadata Handler. The manipulation of the argument label leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
The sources list no fixed version for DT42 BerryNet.
Written with Claude Haiku 5.5 from the sources below · 2026-10-28
Timeline
- 2026-10-21 Threatist record created from CVE-2026-114040
- 2026-10-21 CISA SSVC decision points changed
- 2026-10-21 Priority changed: LOW → MEDIUM
References
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences