CVE-2026-111170 kedro-org CVE debrief

Who should care

Defenders of systems using kedro-datasets, particularly those using PartitionedDataset with any storage backend, should assess exposure and prioritize upgrading to kedro-datasets >= 9.3.0.

Why it matters

CVE-2026-111170 allows an attacker to write files outside the configured dataset directory in kedro-datasets, potentially overwriting arbitrary files. Defenders should prioritize upgrading to kedro-datasets >= 9.3.0 and validate partition IDs.

• Potential arbitrary file write on the filesystem
• Possible overwriting of sensitive files
• Need for validation of partition IDs
• Upgrade to patched version required

Technical summary

The PartitionedDataset in kedro-datasets was vulnerable to path traversal. An attacker could cause files to be written outside the configured dataset directory, potentially overwriting arbitrary files on the filesystem. The vulnerability has been patched in kedro-datasets version 9.3.0. Users should upgrade to kedro-datasets >= 9.3.0. The fix normalizes constructed paths using posixpath.normpath and validates that the resolved path remains within the dataset base directory before use, raising a DatasetError if the path escapes the base directory.

Defensive priority

Upgrade to kedro-datasets >= 9.3.0, validate partition IDs, and monitor for suspicious file writes

Recommended defensive actions

• Upgrade to kedro-datasets version 9.3.0 or later
• Validate partition IDs before passing them to PartitionedDataset
• Monitor for suspicious file writes
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The vulnerability allows an attacker to write files outside the configured dataset directory by exploiting the path traversal in PartitionedDataset. Users of PartitionedDataset with any storage backend are affected.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.