CVE-2026-75111
Evidently UI Path Traversal via Dataset Materialization Filename
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system files, which are then materialized into datasets and retrieved through the download endpoint.
| CWE | CWE-22 |
| Vendor | evidentlyai |
| Product | evidently |
| Published | Aug 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for evidentlyai evidently
Be the first to know when new high vulnerabilities affecting evidentlyai evidently are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
evidentlyai / evidently
0 ≤ 0.7.21
References
github.com: https://github.com/evidentlyai/evidently/issues/1887 github.com: https://github.com/evidentlyai/evidently github.com: https://github.com/evidentlyai/evidently/blob/main/src/evidently/ui/service/datasets/data_source.py vulncheck.com: https://www.vulncheck.com/advisories/evidently-ui-path-traversal-via-dataset-materialization-filename
Credits
🔍 geo-chen