Ludwig-ai vulnerabilities
We track 1 vulnerability in Ludwig-ai products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Ludwig-ai vulnerabilities
- 8.1 High severity
ludwig: Improper Limitation of a Pathname to a Restricted Directory
Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8, ludwig.datasets.archives.extract_archive() validated tar member names before calling TarFile.extractall() but did not validate symlink members or ha