CVE-2026-109153: MosaicML Composer Checkpoint Extraction checkpoint.py tarball.extractall path traversal
A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted early about this disclosure.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
MosaicML Composer versions up to and including 0.32.1 are identified as affected. The vulnerable code is in checkpoint extraction within composer/utils/checkpoint.py.
What does an attacker need to exploit this issue?
The issue is remotely exploitable and requires user interaction, while no privileges are required according to the supplied severity vector. Exploitation involves manipulating archive contents so that checkpoint extraction performs path traversal.
What is the likely impact of successful exploitation?
The supplied severity vector indicates low impact to confidentiality, integrity, and availability. Path traversal during archive extraction may allow files to be written outside the intended extraction location.
Is a fix version or workaround available in the provided information?
No fixed version, configuration mitigation, or workaround is provided. The available data only identifies affected versions through 0.32.1.