Medium severity6.3NVD Advisory· Published Oct 13, 2026

CVE-2026-109155

Description

A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not responded yet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

DeepPavlov/DeepPavlovllm-create
Range: <1.7.0

Patches

Vulnerability mechanics

References

github.com/deeppavlov/DeepPavlov/issues/1711nvd
vuldb.com/cve/CVE-2026-109155nvd
vuldb.com/submit/978673nvd
vuldb.com/vuln/416888nvd
vuldb.com/vuln/416888/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000