CVE-2025-0851

Path traversal issue in Deep Java Library

9.3 CriticalPublic exploitFix available

A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

26.4%Up 26.3 points since Jan 30, 2025

What each source reports

CVE List Score used 9.3

Path traversal issue in Deep Java Library

A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

Record: CVE-2025-0851
CVSS 4.0: 9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-36, CWE-73
Updated: 2026-11-02

EUVDEUVD-2025-0175 9.3

A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

Record: EUVD-2025-0175
CVSS 4.0: 9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-jcrp-x7w3-ffmg 9.3

Deep Java Library path traversal issue

Summary

Deep Java Library (DJL) is an open-source, high-level, engine-agnostic Java framework for deep learning. DJL is designed to be easy to get started with and simple to use for Java developers. DJL provides a native Java development experience and functions like any other regular Java library.

DJL provides utilities for extracting tar and zip model archives that are used when loading models for use with DJL. These utilities were found to contain issues that do not protect against absolute path traversal during the extraction process.

Impact

An issue exists with DJL's untar and unzip functionalities. Specifically, it is possible to create an archive on a Windows system, and when extracted on a MacOS or Linux system, write artifacts outside the intended destination during the extraction process. The reverse is also true for archives created on MacOS/Linux systems and extracted on Windows systems.

Impacted versions: 0.1.0 - 0.31.0

Patches

This issue has been patched in DJL 0.31.1 [1]

Workarounds

Do not use model archive files from sources you do not trust. You should only use model archives from official sources like the DJL Model Zoo, or models that you have created and packaged yourself.

References

If you have any questions or comments about this advisory, we ask that you contact AWS/Amazon Security via our vulnerability reporting page [2] or directly via email to [email protected]. Please do not create a public GitHub issue.

[1] https://github.com/deepjavalibrary/djl/tree/v0.31.1 [2] https://aws.amazon.com/security/vulnerability-reporting

Record: GHSA-jcrp-x7w3-ffmg
CVSS 4.0: 9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-22, CWE-36
Updated: 2026-11-02

NVD 9.3

A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

Record: CVE-2025-0851
CVSS 4.0: 9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-36, CWE-73
Updated: 2026-11-02

OSV 9.3

Path traversal issue in Deep Java Library

A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

Record: CVE-2025-0851
CVSS 4.0: 9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness: CWE-36, CWE-73
Updated: 2026-11-02

OSVGHSA-jcrp-x7w3-ffmg 9.3

Deep Java Library path traversal issue

Summary

Impact

Impacted versions: 0.1.0 - 0.31.0

Patches

This issue has been patched in DJL 0.31.1 [1]

Workarounds

Do not use model archive files from sources you do not trust. You should only use model archives from official sources like the DJL Model Zoo, or models that you have created and packaged yourself.

References

[1] https://github.com/deepjavalibrary/djl/tree/v0.31.1 [2] https://aws.amazon.com/security/vulnerability-reporting

Record: GHSA-jcrp-x7w3-ffmg
CVSS 4.0: 9.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-22, CWE-36
Updated: 2026-11-02

Affected products

aws deepjavalibrary

Affected packages

Affected packages
Package	Affected	Fixed
`ai.djl:api` Maven	before 0.31.1	0.31.1
`ai.djl:api` Maven	before 0.31.1, plus listed versions 0.10.00.11.00.12.00.13.00.14.0 Show 28 moreShow less 0.15.00.16.00.17.00.18.00.19.00.2.00.2.10.20.00.21.00.22.00.22.10.23.00.24.00.25.00.26.00.27.00.28.00.29.00.3.00.30.00.31.00.4.00.4.10.5.00.6.00.7.00.8.00.9.0	0.31.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	skrkcb2/CVE-2025-0851	2025-02-17

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-0851 is a critical vulnerability (CVSS 9.3) in Aws Deepjavalibrary, published January 29, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 26.4%, the 98th percentile. Fixed in ai.djl:api 0.31.1.