CVE-2026-75111

Received Received - Intake

Path Traversal in Evidently UI Dataset Materialization

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: VulnCheck

Description

Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system files, which are then materialized into datasets and retrieved through the download endpoint.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-17

Last Modified

2026-08-17

Generated

2026-08-18

AI Q&A

2026-08-18

EPSS Evaluated

N/A

NVD

CVE-2026-75111

EUVD

EUVD-2026-60390

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

Evidently UI has a flaw where the filename parameter in the dataset materialization endpoint is not properly validated. This allows unauthenticated attackers to read arbitrary files outside the intended workspace directory by using path traversal sequences or absolute paths. Attackers can then access system files and retrieve them through the download endpoint.

Detection Guidance

Check Evidently UI logs for suspicious dataset materialization requests with unusual filename parameters. Look for paths containing traversal sequences like '../' or absolute paths. Monitor download endpoints for unexpected file retrievals outside the workspace directory.

Impact Analysis

This vulnerability can lead to unauthorized access to sensitive files on the system, including configuration files, logs, or other confidential data. Attackers could exploit it to steal information, escalate privileges, or perform further attacks on the system.

Compliance Impact

This vulnerability could result in non-compliance with regulations like GDPR or HIPAA, as it allows unauthorized access to sensitive data. Organizations may face legal penalties, reputational damage, and loss of customer trust due to data breaches resulting from this flaw.

Mitigation Strategies

Apply input validation to the filename parameter in the dataset materialization endpoint. Restrict file access to the workspace directory only. Update to a patched version if available. Implement strict path traversal checks before processing filenames.

Hi! I’m here to help you understand CVE-2026-75111. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70