Live › vulnerability › CVE-2026-117509
Go to dashboardRasa_NLU_Chi up to 0.12.2 has a path traversal flaw in the model persistor's decompress function in rasa_nlu/persistor.py. A remote attacker can use crafted input to read or write files outside the intended model directory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 16:33 UTC. All times on this page are UTC.
Teams running Rasa_NLU_Chi up to 0.12.2 that load model archives through the Model Persistor, especially where those archives or their source can be influenced from outside. Deployments that do not use the persistor's decompress path or only load models they built themselves are less exposed; the sources do not say more.
No product ranges from the sources yet.
0.12.2 (for example with pip show rasa_nlu_chi or the project's requirements file)Persistor._decompress in rasa_nlu/persistor.py to confirm the code path is presentEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function Persistor._decompress of the file rasa_nlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-117509")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.