Wandb vulnerabilities
We track 1 vulnerability in Wandb products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Wandb vulnerabilities
- 8.8 High severity
wandb: Improper Limitation of a Pathname to a Restricted Directory
Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path traversal attacks. Attackers controlling the backend can supply file names with directory traversal sequences to write files