Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, enabling unauthenticated attackers to perform path traversal attacks. By supplying traversal sequences or absolute paths in the filename field, attackers can access arbitrary files outside the workspace directory. These files are materialized into datasets and can be retrieved through the download endpoint. This vulnerability affects evidently versions <=0.7.21 and has a CVSS 4.0 score of 8.7, indicating high severity. No vendor advisory or patch information is currently available.

An unauthenticated attacker can read arbitrary files on the system hosting evidently by exploiting this path traversal vulnerability. This can lead to exposure of sensitive information stored outside the workspace directory. The vulnerability does not require user interaction or privileges, increasing its risk. However, there is no information about active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the evidently UI to trusted users and environments to reduce exposure. Monitor for updates from evidentlyai regarding patches or official mitigations.