6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-35492

CVE-2026-35492: Kedro-Datasets has a path traversal vulnerability in PartitionedDataset allows arbitrary file write

Kedro-Datasets is a Kendo plugin providing data connectors. Prior to 9.3.0, PartitionedDataset in kedro-datasets was vulnerable to path traversal. Partition IDs were concatenated directly with the dataset base path without validation. An attacker or malicious input containing .. components in a partition ID could cause files to be written outside the configured dataset directory, potentially overwriting arbitrary files on the filesystem. Users of PartitionedDataset with any storage backend (local filesystem, S3, GCS, etc.) are affected. This vulnerability is fixed in 9.3.0.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-35492

CVE-2026-35492:

6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
kedro-datasets	pip	< 9.3.0	9.3.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the PartitionedDataset class within the kedro-datasets package, which is susceptible to a path traversal attack. The root cause is the lack of input validation on partition IDs provided by the user. Specifically, the _partition_to_path method, which is called during the save operation, directly concatenated user-supplied partition IDs with the base path of the dataset. This allowed an attacker to use '..' sequences in the partition ID to navigate outside the intended directory and write files to arbitrary locations on the filesystem. A similar vulnerability existed in the _path_to_partition method used during the load operation, which was also patched to prevent reading from outside the dataset directory. The patch introduces a new method, _validate_partition_path, which normalizes and verifies that the resolved path is within the legitimate dataset directory before any file I/O is performed. This new validation method is now called from both _partition_to_path and _path_to_partition, effectively mitigating the path traversal vulnerability.

Vulnerable functions

PartitionedDataset._partition_to_path

kedro-datasets/kedro_datasets/partitions/partitioned_dataset.py

This function is responsible for converting a partition ID into a full file path for saving data. Before the patch, it performed a direct concatenation of the base path and the partition ID without any validation or sanitization. This allowed a malicious user to provide a partition ID containing path traversal characters (e.g., `../../etc/passwd`) to write files to arbitrary locations on the filesystem, outside of the intended dataset directory. The function is called by the public `save` method of the `PartitionedDataset` class.

PartitionedDataset._path_to_partition

kedro-datasets/kedro_datasets/partitions/partitioned_dataset.py

This function is used during the `load` operation to convert a file path back into a partition ID. While the primary vulnerability is in writing files, this function was also patched to prevent loading data from outside the dataset directory. If an attacker could manipulate the file listing or if a path traversal file was already written, this function could be triggered to load data from an unintended location. The patch adds a validation step to ensure the path is within the expected directory before processing it.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.