Evidentlyai vulnerabilities
We track 1 vulnerability in Evidentlyai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 17, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Evidentlyai vulnerabilities
- 7.5 High severity
evidently: Improper Limitation of a Pathname to a Restricted Directory
Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in th