Reported by 2 outlets
CVE-2026-91771 - High (8.8) Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.downloa
hot0.0
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
🟠 CVE-2026-91771 - High (8.8) Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.downloa
www.thehackerwire.com · 29d ago · September 15th, 2026
🟠 CVE-2026-91771 - High (8.8) Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.downloa
via Mastodon https://www.thehackerwire.com/vulnerability/CVE-2026-91771/
-
update from www.valtersit.com
CVE-2026-91771: path traversal in Weights & Biases wandb before 0.29.0 lets a malicious backend write files outside the download dir, potent
www.valtersit.com · 20d ago · September 23rd, 2026
CVE-2026-91771: path traversal in Weights & Biases wandb before 0.29.0 lets a malicious backend write files outside the download dir, potent
via Mastodon https://www.valtersit.com/cve/CVE-2026-91771/