ludwig vulnerabilities

1 known vulnerability in ludwig from Ludwig-ai. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  ludwig: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-104103Oct 14, 2026Ludwig-ai

  Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8, ludwig.datasets.archives.extract_archive() validated tar member names before calling TarFile.extractall() but did not validate symlink members or ha