https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:22:14 +0000 https://cve.radiocsirt.org/vuln/cve-2026-54457 <p><strong>Affected:</strong> tensorzero</p> <p>TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation. Prior to 2026.6.0, the TensorZero Gateway /internal/object_storage endpoint accepts a caller-supplied JSON storage_path parameter that dynamically overrides the [object_storage] configuration. Selecting the filesystem storage type allows arbitrary files on the gateway filesystem to be read, including credential files. Selecting the s3_compatible storage type causes outbound object-storage requests to attacker-chosen internal or cloud-metadata endpoints. Exploitation requires access to the gateway, which can be authenticated or unauthenticated depending on deployment configuration. This issue is fixed in version 2026.6.0.</p> <p><strong>Affected:</strong> tensorzero</p> <p>TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation. Prior to 2026.6.0, the TensorZero Gateway /internal/object_storage endpoint accepts a caller-supplied JSON storage_path parameter that dynamically overrides the [object_storage] configuration. Selecting the filesystem storage type allows arbitrary files on the gateway filesystem to be read, including credential files. Selecting the s3_compatible storage type causes outbound object-storage requests to attacker-chosen internal or cloud-metadata endpoints. Exploitation requires access to the gateway, which can be authenticated or unauthenticated depending on deployment configuration. This issue is fixed in version 2026.6.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-54457 https://cve.radiocsirt.org/vuln/ghsa-824w-x939-6cmc <p><strong>Affected:</strong> PyPI: tensorzero</p> <p>### Impact</p> <p>The `/internal/object_storage` endpoint accepts a caller-supplied JSON `storage_path` parameter that dynamically overrides the TensorZero `[object_storage]` configuration.</p> <p>By abusing the `filesystem` storage type, a caller can read arbitrary files from the gateway filesystem, including files that may contain sensitive credentials. Similarly, by abusing the `s3_compatible` storage type, the caller can coerce the gateway into making outbound object storage requests to attacker-chosen internal/cloud-metadata endpoints.</p> <p>This vulnerability only applies when the gateway can be accessed by untrusted callers. If a developer&#39;s TensorZero deployment has authentication enabled, only authenticated callers can exploit this vulnerability. If a developer&#39;s deployment has authentication disabled, any caller can exploit this vulnerability.</p> <p>### Remediation</p> <p>The vulnerability has been patched in version `2026.6.0`. See PR #7527.</p> <p>### Workarounds</p> <p>If developers are unable to upgrade a gateway that is exposed to untrusted callers, please block external access to the `/internal/object_storage` endpoint.</p> <p><strong>Affected:</strong> PyPI: tensorzero</p> <p>### Impact</p> <p>The `/internal/object_storage` endpoint accepts a caller-supplied JSON `storage_path` parameter that dynamically overrides the TensorZero `[object_storage]` configuration.</p> <p>By abusing the `filesystem` storage type, a caller can read arbitrary files from the gateway filesystem, including files that may contain sensitive credentials. Similarly, by abusing the `s3_compatible` storage type, the caller can coerce the gateway into making outbound object storage requests to attacker-chosen internal/cloud-metadata endpoints.</p> <p>This vulnerability only applies when the gateway can be accessed by untrusted callers. If a developer&#39;s TensorZero deployment has authentication enabled, only authenticated callers can exploit this vulnerability. If a developer&#39;s deployment has authentication disabled, any caller can exploit this vulnerability.</p> <p>### Remediation</p> <p>The vulnerability has been patched in version `2026.6.0`. See PR #7527.</p> <p>### Workarounds</p> <p>If developers are unable to upgrade a gateway that is exposed to untrusted callers, please block external access to the `/internal/object_storage` endpoint.</p> https://cve.radiocsirt.org/vuln/ghsa-824w-x939-6cmc