AIKIDO-2026-10400
kserve is vulnerable to Path Traversal
75
High Risk
This Affects:
kserveTL;DR
The storage initializer's HTTPS handler (https.go) passes unsanitized request URL input into os.Remove in createNewFile, allowing path traversal so an attacker can delete arbitrary files on the host. Separately, extractTarFiles does not validate or clean destination paths when extracting tar archives, so malicious archive entries with .. can write files outside the intended directory. Both issues are fixed in v0.17.0: path handling in the HTTPS handler is validated to prevent traversal, and extractTarFiles now cleans and validates destination paths before extraction.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
kserve is vulnerable to Path Traversal in versions 0.0.1 - 0.16.0.
How to fix this
Upgrade the kserve library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant