CVE-2026-8387 Details
Description
A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extracting `.zip` archives using the `ZipFile.extractall()` method in `StorageManager._extract_to_cache()`. This issue arises due to the lack of path traversal validation, enabling an attacker to write arbitrary files to the filesystem. Attack vectors include dataset downloads, artifact downloads, model downloads, and offline session imports. The vulnerability can lead to remote code execution through methods such as cron job injection, SSH key overwrite, or web shell deployment. The issue is resolved in version 2.1.6.
A path traversal vulnerability has been identified in Allegro AI ClearML versions through 1.16.5. The issue arises in the StorageManager's method _extract_to_cache(), where the ZipFile.extractall() function is used to extract .zip archives without proper path validation. This oversight enables an attacker to write arbitrary files to the filesystem. The vulnerability can be exploited through various channels, including dataset and artifact downloads, model downloads, and offline session imports. The extracted files can lead to remote code execution by injecting malicious cron jobs, overwriting SSH keys, or deploying web shells. In contrast, .tar.gz and .tgz archives are safely extracted using a validated method, highlighting an inconsistency in how different archive types are handled.
Users are advised to update to ClearML version 2.1.6, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 1, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-23 | Relative Path Traversal | [email protected] |
Affected Products
No affected product data is available for this CVE.
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 1, 2026 | CVE Modified | CISA-ADP |
| Jul 1, 2026 | New CVE Received | [email protected] |