CVE-2026-111170: kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot Name
kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by supplying absolute plot names. Because validatesubpath() strips leading slashes while pathlib's join discards the base path, attackers can create or overwrite files anywhere the process can write.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments using kedro-datasets versions 9.3.0 through 9.6.0 are exposed where an attacker with the required low-level privileges can control the plot name passed to MatplotlibDataset.save(). The attacker can write or overwrite files that the running process is permitted to write.
What does an attacker need to exploit it?
The attacker needs to supply an absolute plot name to MatplotlibDataset.save(). No user interaction is required, and the attack can be performed remotely where the attacker can reach a workflow or interface that accepts and passes through that value.
How can I determine whether my environment is affected?
Check whether your installed kedro-datasets version is from 9.3.0 through 9.6.0 and whether your use of MatplotlibDataset.save() permits plot names influenced by lower-privileged users or external input. Absolute plot names are the relevant dangerous input because they cause pathlib joining to ignore the intended dataset directory.