MosaicML CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM MosaicML CVE published 2026-10-13

CVE-2026-109153

A path traversal vulnerability was detected in MosaicML Composer up to 0.32.1, affecting the function tarball.extractall of the file composer/utils/checkpoint.py in the Checkpoint Extraction component. This issue allows remote attackers to manipulate file paths, potentially leading to unauthorized file access or modification. The vulnerability requires verification of affected versions and exposure, as we [truncated]