CVE-2026-117509: crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal
A vulnerability was detected in crownpku RasaNLUChi up to 0.12.2. Affected is the function Persistor.decompress of the file rasanlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Which deployments should be prioritized for review?
Deployments using crownpku Rasa_NLU_Chi versions up to 0.12.2 should be reviewed, specifically where the Model Persistor component can invoke Persistor._decompress. The attack can be launched remotely and requires low privileges.
What is known about exploitability?
The issue is a path traversal vulnerability with low attack complexity, no user interaction requirement, and a public exploit reported as available. Successful exploitation can affect confidentiality, integrity, and availability to a limited extent.
Is a fix available from the project?
The provided information does not identify a fixed version or vendor patch. It states that the project was notified through an issue report but had not responded at the time of publication.