PT-2026-30018 · Kedro · Kedro

Highrashid Akanchwala · Published 2026-04-03 · Updated 2026-04-06 · CVE-2026-35167

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Kedro versions prior to 1.3.0

Description The get versioned path() method directly interpolates user-supplied version strings without sanitization when constructing filesystem paths. This allows traversal sequences like '../' to escape the intended versioned dataset directory. This is reachable through catalog.load(..., version=...), DataCatalog.from config(..., load versions=...), and the CLI via kedro run --load-versions=dataset:../../../secrets. An attacker influencing the version string can force Kedro to load files from outside the intended directory, potentially leading to unauthorized file reads, data poisoning, or cross-tenant data access.

Recommendations Upgrade to Kedro version 1.3.0 or later. Validate version strings before passing them to DataCatalog or the CLI, ensuring they do not contain .. segments, path separators, or absolute paths.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-35167

GHSA-6326-W46W-PPJW

PYSEC-2026-71

Affected Products

Kedro

References · 7

• https://github.com/kedro-org/kedro/security/advisories/GHSA-6326-w46w-ppjw · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6326-w46w-ppjw · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-71 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35167 · Security Note
• https://github.com/kedro-org/kedro/pull/5442 · Note
• https://github.com/kedro-org/kedro · Note
• https://twitter.com/CVEnew/status/2041223949028061233 · Twitter Post