Vulnerability Description
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system files, which are then materialized into datasets and retrieved through the download endpoint.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/evidentlyai/evidently
- https://github.com/evidentlyai/evidently/blob/main/src/evidently/ui/service/data
- https://github.com/evidentlyai/evidently/issues/1887
- https://www.vulncheck.com/advisories/evidently-ui-path-traversal-via-dataset-mat
FAQ
What is CVE-2026-75111?
CVE-2026-75111 is a vulnerability with a CVSS score of 7.5 (HIGH). Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Atta...
How severe is CVE-2026-75111?
CVE-2026-75111 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-75111?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.