Listen to this Post
How the CVE Works
The vulnerability exists in `dagster._grpc.impl.get_notebook_data` in Dagster 1.10.14. Attackers with access to the gRPC server can exploit path traversal sequences in the `notebook_path` field of `ExternalNotebookData` requests. The system fails to properly sanitize user-supplied input, allowing attackers to bypass the extension-based validation check. This enables unauthorized reading of arbitrary files on the server, potentially exposing sensitive data or configuration files.
DailyCVE Form
Platform: Dagster
Version: 1.10.14
Vulnerability: Local File Inclusion
Severity: Moderate
Date: Jul 22, 2025
Prediction: Patch expected by Aug 5, 2025
What Undercode Say
Check vulnerable version
pip show dagster | grep Version
Exploit PoC (simulated)
curl -X POST http://target/grpc -d '{"notebook_path":"../../etc/passwd"}'
Mitigation test
grep -r "get_notebook_data" /path/to/dagster/
How Exploit
1. Attacker sends crafted `ExternalNotebookData` request.
2. Malicious `notebook_path` bypasses extension check.
3. Server processes traversal sequences, leaking files.
Protection from this CVE
- Upgrade to patched version.
- Restrict gRPC server access.
- Implement path sanitization.
Impact
- Unauthorized file disclosure.
- Potential system compromise.
- Data integrity violation.
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
