CVE-2026-111170: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in kedro-org kedro-datasets

The vulnerability in kedro-datasets (versions 9.3.0 to 9.6.0) is a path traversal issue in the MatplotlibDataset.save() method. An attacker can supply absolute plot names to bypass directory restrictions due to improper handling of path validation. Specifically, validate_sub_path() strips leading slashes, but pathlib's join method discards the base path if the second argument is absolute, allowing file writes outside the dataset directory. This can lead to arbitrary file creation or overwriting anywhere writable by the process.

An attacker with low privileges can exploit this vulnerability to write or overwrite files outside the intended dataset directory. This could lead to unauthorized file modification or creation, potentially impacting system integrity or causing denial of service depending on the files affected. The CVSS 4.0 score is 7.1 (high severity), reflecting network attack vector, low complexity, no privileges required beyond low, no user interaction, and high impact on integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid running kedro-datasets in environments where untrusted users can supply plot names to MatplotlibDataset.save(). Monitor vendor channels for patches or updates addressing this vulnerability.