The vulnerability in allegroai/clearml (<=1.16.5) arises from inadequate validation of file paths when extracting .zip archives using ZipFile.extractall() in StorageManager._extract_to_cache(). This lack of path traversal checks enables attackers to write files outside the intended extraction directory, potentially overwriting critical system files or placing malicious files. Attack vectors include downloading datasets, artifacts, models, or importing offline sessions. Successful exploitation can result in remote code execution through methods such as injecting cron jobs, overwriting SSH keys, or deploying web shells. The vulnerability is addressed in version 2.1.6.

An attacker able to exploit this vulnerability can write arbitrary files to the filesystem, which may lead to remote code execution. This can compromise system integrity by enabling unauthorized code execution via cron jobs, SSH key manipulation, or web shell deployment. The CVSS score is low (2.4) with network attack vector, low complexity, requiring high privileges and user interaction, causing limited integrity impact and no confidentiality or availability impact.

A fix is available in allegroai/clearml version 2.1.6. Users should upgrade to this version or later to remediate the vulnerability. No official temporary workaround or patch is indicated. Until upgrading, avoid processing untrusted .zip archives with the affected versions to reduce risk.