CVE-2026-104103 | ludwig-ai Ludwig up to 0.17.7 Archive Extraction archives.py ludwig.datasets.archives.extract_archive path traversal

October 14, 2026 Yanac

A vulnerability, which was classified as problematic, was found in ludwig-ai Ludwig up to 0.17.7. Impacted is the function ludwig.datasets.archives.extract_archive of the file ludwig/datasets/archives.py of the component Archive Extraction. The manipulation results in path traversal.

This vulnerability is reported as CVE-2026-104103. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More