CVE-2025-70951

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-10951 describes a path traversal vulnerability identified in `geyang ml-logger` versions up to 0.10.36. This flaw is located within the `log_handler` function of the `ml_logger/server.py` file. The vulnerability allows for the manipulation of the `File` argument, which can lead to an attacker traversing directories and potentially accessing files outside of the intended directory. This issue can be exploited remotely, and a public exploit is available.

Description
-

Social media

Hype score
Not currently trending

References

Sources include official advisories and independent security research.