CVE-2026-114040: DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get_model_meta path traversal
A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.getmodelmeta of the file berrynet/dlmodelmgr.py of the component Model Package Metadata Handler. The manipulation of the argument label leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be performed remotely, but the reported CVSS vector indicates that the attacker needs low-level privileges and user interaction. Exploitation involves manipulating the label argument passed to DLModelManager.get_model_meta.
Which BerryNet versions are known to be affected?
DT42 BerryNet through version 3.10.2 is reported as affected. The available information does not identify a fixed version.
What is the likely impact of successful exploitation?
The reported severity vector indicates low confidentiality impact, with no integrity or availability impact. Because the flaw is path traversal, the affected metadata handler may be used to access files outside its intended path scope.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used. The project was reportedly notified through an issue report but had not responded at the time of the report.