CVE-2026-117509 Details
Description
A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function Persistor._decompress of the file rasa_nlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A path traversal vulnerability has been identified in crownpku Rasa_NLU_Chi versions through 0.12.2. The issue arises in the Model Persistor component, specifically within the Persistor._decompress function in the rasa_nlu/persistor.py file. The vulnerability allows for arbitrary file writes outside the designated model directory, using the server process's privileges. This issue can be exploited remotely by manipulating model archives stored in cloud services like AWS S3, GCS, or Azure.
To address this vulnerability, it is recommended to validate the member names of archives before extraction, ensuring that no absolute paths or names that could escape the target directory are allowed. Alternatively, for Python versions 3.12 and above, the tarfile extraction can be done using a built-in filter that excludes unsafe member names, while for earlier versions, a custom safe-extraction method can be implemented.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 27, 2026CISA-ADP
Assessed Oct 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/crownpku/Rasa_NLU_Chi/ | [email protected] | ProductSource CodeVendor |
| https://github.com/crownpku/Rasa_NLU_Chi/issues/138 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/user-attachments/files/33302165/poc.zip | [email protected] | Broken LinkExploit |
| https://vuldb.com/cve/CVE-2026-117509 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1024527 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/427075 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/427075/cti | [email protected] | AdvisoryPermission Required |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| crownpku Rasa_NLU_Chi | <= 0.12.2 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 28, 2026 | CVE Modified | CISA-ADP |
| Oct 27, 2026 | New CVE Received | [email protected] |