CVE-2026-109155 | DeepPavlov up to 1.7.0 Model Download untar path traversal (Issue 1711)

SecurityVulns
Yanac

A vulnerability identified as critical has been detected in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal.

This vulnerability is tracked as CVE-2026-109155. The attack is possible to be carried out remotely. No exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More