medium6.3
CVE-2026-109153
A vulnerability was detected in MosaicML Composer up to 0.32.1.
Impact
A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Extraction. The manipulation results in path traversal. The attack can be executed remotely. The vendor was contacted early about this disclosure.
Affected products
| Product | Affected versions |
|---|---|
| MosaicML Composer | before 0.32.1. |
Versions were read from the advisory text. No structured product data has been published for this record yet.