{"id":"CVE-2026-114040","kind":"vulnerability","aliases":["CVE-2026-114040"],"related":[],"title":"DT42 BerryNet: path traversal in model metadata handler exposes server files","description":"A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get_model_meta of the file berrynet/dlmodelmgr.py of the component Model Package Metadata Handler. The manipulation of the argument label leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.","summary":"DT42 BerryNet up to 3.10.2 has a path traversal flaw in the get_model_meta function of its model package metadata handler, where the label argument is not sanitized. A remote attacker can use it to make the server read files outside the intended model directory.","severity":"medium","cvss":4.0,"epss":0.00274,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ai-tooling","berrynet","self-hosted"],"not_affected_if":[],"how_to_check":"- Check the installed BerryNet version against 3.10.2 (the sources say versions up to and including 3.10.2 are affected; the exact check command is unknown).\n- Review berrynet/dlmodelmgr.py for the get_model_meta function and whether the label argument is validated (the sources do not give a fixed line or check).","fix":"- unknown: the sources say the project has not responded to the issue report and do not name a fixed version or workaround.\n- Until a fix exists, restrict network access to the BerryNet service to trusted hosts.","status":"open","published_at":"2026-10-21T04:18:10+00:00","first_seen_at":"2026-10-23T21:57:28+00:00","triaged_at":"2026-10-25T04:42:00+00:00","updated_at":"2026-10-25T04:42:00+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-25T04:42:00Z","model":"claude-haiku-5-5","output":{"fix":"- unknown: the sources say the project has not responded to the issue report and do not name a fixed version or workaround.\n- Until a fix exists, restrict network access to the BerryNet service to trusted hosts.","reach":"network","title":"DT42 BerryNet: path traversal in model metadata handler exposes server files","impact":"medium","summary":"DT42 BerryNet up to 3.10.2 has a path traversal flaw in the get_model_meta function of its model package metadata handler, where the label argument is not sanitized. A remote attacker can use it to make the server read files outside the intended model directory.","category":"ai-tooling","nicknames":[],"who_cares":["berrynet","self-hosted"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Remote caller reads arbitrary files on the server","analyst_note":"Find whether DT42 has released a fix or a commit for dlmodelmgr.py get_model_meta, and whether authentication is required; sources linked are the NVD and EPSS pages for CVE-2026-114040.","how_to_check":"- Check the installed BerryNet version against 3.10.2 (the sources say versions up to and including 3.10.2 are affected; the exact check command is unknown).\n- Review berrynet/dlmodelmgr.py for the get_model_meta function and whether the label argument is validated (the sources do not give a fixed line or check).","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams running DT42 BerryNet up to version 3.10.2 that expose the service to a network where untrusted callers can reach the model metadata endpoint. The sources do not say which deployment settings or roles are required, so exposure is unknown beyond the affected version range.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.001134,"input_tokens":3406,"output_tokens":1586,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114040':14A,17A '-2026':13A,16A '3.10.2':29B,82C 'affect':84C 'ai':19B 'ai-tool':18B 'argument':50B,107C 'attack':56B,114C 'berrynet':2A,21B,26B,79C 'berrynet/dlmodelmgr.py':95C 'carri':119C 'compon':98C 'cve':12A,15A 'detect':76C 'directori':70B 'disclos':126C 'dlmodelmanager.get':89C 'dt42':1A,25B,78C 'earli':139C 'element':85C 'exploit':123C 'expos':9A 'file':11A,65B,94C 'flaw':34B 'function':40B,88C 'get':37B 'handler':8A,46B,102C 'host':24B 'inform':135C 'intend':68B 'issu':142C 'label':49B,108C 'lead':109C 'make':61B 'manipul':104C 'may':129C 'meta':39B,91C 'metadata':7A,45B,101C 'model':6A,38B,43B,69B,90C,99C 'outsid':66B 'packag':44B,100C 'path':3A,32B,111C 'possibl':116C 'problem':138C 'project':133C 'public':127C 'read':64B 'remot':55B,121C 'report':143C 'respond':147C 'sanit':53B 'secur':72C 'self':23B 'self-host':22B 'server':10A,63B 'tool':20B 'travers':4A,33B,112C 'use':58B,131C 'vulner':73C 'yet':148C","nicknames":[],"mitigations":[],"who_affected":"Teams running DT42 BerryNet up to version 3.10.2 that expose the service to a network where untrusted callers can reach the model metadata endpoint. The sources do not say which deployment settings or roles are required, so exposure is unknown beyond the affected version range.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T04:18:10+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114040","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114040","severity":null,"published_at":"2026-10-21T04:18:10+00:00","modified_at":"2026-10-21T14:26:26+00:00","first_seen_at":"2026-10-23T21:57:28+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114040","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114040","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}