AIKIDO-2026-248146
wandb is vulnerable to Path Traversal
87
High Risk
This Affects:
wandbTL;DR
File.download writes the file returned from the W&B backend to a local path built by joining the download root with the file name from the server response. The response's file name is not checked for relative path segments, so a crafted name lets the write happen outside the intended run or artifact directory. Reachable through artifact.files() and artifact.checkout(), this can overwrite files elsewhere on disk. The fix rejects file and artifact names containing relative paths before the download proceeds.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and download W&B artifacts or run files via artifact.files(), artifact.checkout(), or File.download() where file names may come from artifact or backend metadata you do not fully trust.
Background info
wandb is vulnerable to Path Traversal in versions 0.8.15 - 0.28.2.
How to fix this
Upgrade the wandb library to the patch version.
Links
GitHub Release
Other
github.com/wandb/wandb/blob/v0.29.0/CHANGELOG.md#0290---2026-08-26github.com/wandb/wandbgithub.com/wandb/wandb/blob/v0.27.2/wandb/apis/public/files.py#L319-L347
vulncheck.com/advisories/weights-biases-wandb-before-0.29.0-path-traversal-via-file-download
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.