seldonio vulnerabilities

Products

• mlserver 1

Latest seldonio CVEs

Newest publication first

1. CVE-2026-109156 SeldonIO MLServer environment_tarball env.py _extract_env path traversal

   Published 2026-10-13

   Medium·CVSS 5.3 EPSS 0.42%

   A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlserver/env.py of the component environment_tarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was cont...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.