CVE-2026-75111: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in evidentlyai evidently
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system files, which are then materialized into datasets and retrieved through the download endpoint.
AI Analysis
Technical Summary
The vulnerability in evidentlyai evidently arises from improper validation of the filename parameter in the dataset materialization endpoint. This flaw permits unauthenticated attackers to perform path traversal attacks by supplying traversal sequences or absolute paths, enabling them to read arbitrary files outside the restricted workspace directory. The accessed files are materialized into datasets and can be retrieved via the download endpoint, potentially exposing sensitive system information. The issue affects all versions up to and including 0.7.21.
Potential Impact
An unauthenticated attacker can exploit this vulnerability to read arbitrary files on the system outside the intended workspace directory. This can lead to exposure of sensitive information, potentially compromising system confidentiality. There is no indication of privilege escalation or code execution. The vulnerability has a high severity rating (CVSS 8.7).
Mitigation Recommendations
No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Evidently UI to trusted users only and monitor for unusual access patterns related to dataset materialization and download endpoints.
CVE-2026-75111: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in evidentlyai evidently
Description
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system files, which are then materialized into datasets and retrieved through the download endpoint.
CVSS v4.0
Score 8.7high
Affected software
evidentlyai
evidently
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in evidentlyai evidently arises from improper validation of the filename parameter in the dataset materialization endpoint. This flaw permits unauthenticated attackers to perform path traversal attacks by supplying traversal sequences or absolute paths, enabling them to read arbitrary files outside the restricted workspace directory. The accessed files are materialized into datasets and can be retrieved via the download endpoint, potentially exposing sensitive system information. The issue affects all versions up to and including 0.7.21.
Potential Impact
An unauthenticated attacker can exploit this vulnerability to read arbitrary files on the system outside the intended workspace directory. This can lead to exposure of sensitive information, potentially compromising system confidentiality. There is no indication of privilege escalation or code execution. The vulnerability has a high severity rating (CVSS 8.7).
Mitigation Recommendations
No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Evidently UI to trusted users only and monitor for unusual access patterns related to dataset materialization and download endpoints.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-17T17:28:41.677Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a837219bf8831d539891c83
Added to database: 08/17/2026, 20:42:01 UTC
Last enriched: 09/25/2026, 02:41:02 UTC
Last updated: 10/02/2026, 02:46:06 UTC
Views: 33
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.