CVE-2026-35167

Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_path() method in kedro/io/core.py constructs filesystem paths by directly interpolating user-supplied version strings without sanitization. Because version strings are used as path components, traversal sequences such as ../ are preserved and can escape the intended versioned dataset directory. This is reachable through multiple entry points: catalog.load(..., version=...), DataCatalog.from_config(..., load_versions=...), and the CLI via kedro run --load-versions=dataset:../../../secrets. An attacker who can influence the version string can force Kedro to load files from outside the intended version directory, enabling unauthorized file reads, data poisoning, or cross-tenant data access in shared environments. This vulnerability is fixed in 1.3.0.

• CWE-22

• https://github.com/kedro-org/kedro/pull/5442Issue Tracking
• https://github.com/kedro-org/kedro/security/advisories/GHSA-6326-w46w-ppjwVendor Advisory

Published

Apr 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-35159Dell Client Platform BIOS contains an Authentication Bypass …5.3
• CVE-2026-3516The Contact List plugin for WordPress is vulnerable to Store…6.4
• CVE-2026-35162Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain…6.5
• CVE-2026-35164Brave CMS is an open-source CMS. Prior to 2.0.6, an unrestri…8.8
• CVE-2026-35165LORIS (Longitudinal Online Research and Imaging System) is a…6.5
• CVE-2026-35166Hugo is a static site generator. From 0.60.0 to before 0.159…5.4
• CVE-2026-35168OpenSTAManager is an open source management software for tec…8.8
• CVE-2026-35169LORIS (Longitudinal Online Research and Imaging System) is a…5.4
• CVE-2026-3517OS Command Injection Remote Code Execution Vulnerability in …7.2
• CVE-2026-35170openFPGALoader is a utility for programming FPGAs. In 1.1.1 …7.1
• CVE-2026-35171Kedro is a toolbox for production-ready data science. Prior …9.8
• CVE-2026-35172Distribution is a toolkit to pack, ship, store, and deliver …7.5