CVE-2025-8917
Path Traversal Leading to Remote Code Execution in allegroai/clearml
CVE-2025-8917 is a medium vulnerability (CVSS 5.8) in Allegroai Allegroai/clearml, published October 5, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in clearml 2.0.2.
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safe_extract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files are overwritten.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Path Traversal Leading to Remote Code Execution in allegroai/clearml
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safe_extract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files are overwritten.
- Record
CVE-2025-8917- CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
EUVDEUVD-2025-32093
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safe_extract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files are overwritten.
- Record
EUVD-2025-32093- CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-579p-qf78-fqm2
clearml is vulnerable to Path Traversal through its `safe_extract` function
A vulnerability in clearml versions before 2.0.2 allows for path traversal due to improper handling of symbolic and hard links in the safe_extract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files are overwritten.
- Record
GHSA-579p-qf78-fqm2- CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
NVD
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safe_extract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files are overwritten.
- Record
CVE-2025-8917- CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSV
Path Traversal Leading to Remote Code Execution in allegroai/clearml
A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the safe_extract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files are overwritten.
- Record
CVE-2025-8917- CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVGHSA-579p-qf78-fqm2
clearml is vulnerable to Path Traversal through its `safe_extract` function
A vulnerability in clearml versions before 2.0.2 allows for path traversal due to improper handling of symbolic and hard links in the safe_extract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files are overwritten.
- Record
GHSA-579p-qf78-fqm2- CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-22
- Updated
- 2026-11-02
OSVPYSEC-2026-1255
clearml is vulnerable to Path Traversal through its `safe_extract` function
A vulnerability in clearml versions before 2.0.2 allows for path traversal due to improper handling of symbolic and hard links in the safe_extract function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting in remote code execution if critical files are overwritten.
- Record
PYSEC-2026-1255- CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clearmlPyPI |
before 2.0.2 | 2.0.2 |
clearmlPyPI |
before 2.0.2, plus listed versions 0.17.00.17.10.17.20.17.30.17.4 Show 45 moreShow less0.17.50.17.5rc00.17.5rc10.17.5rc20.17.5rc30.17.5rc40.17.5rc50.17.5rc60.17.6rc11.0.01.0.11.0.21.0.2rc01.0.31.0.3rc01.0.3rc11.0.41.0.4rc01.0.4rc11.0.51.0.6rc11.0.6rc21.1.01.1.11.1.21.1.2rc01.1.31.1.3rc01.1.41.1.4rc01.1.51.1.5rc01.1.5rc11.1.5rc21.1.5rc31.1.5rc41.1.5rc51.1.5rc61.1.5rc71.1.61.1.6rc01.10.01.10.0rc01.10.11.10.2 |
2.0.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-02 | created | CVE List, EUVD, GitHub Advisories, NVD, OSV |
References
huntr.com/bounties/588fcdd1-fea4-4cc2-a9f8-851701dcb576
github.com/allegroai/clearml/commit/64fb2bcbdbb87a74af90dd723d5ef4a99fceeb73
nvd.nist.gov/vuln/detail/CVE-2025-8917
pypi.org/project/clearml
Left out here: 129 versions. The JSON record has them.