CVE-2026-107377
7.5 HIGHpublic exploit availablePublished 2026-10-08 · Updated 2026-10-14
AI risk analysis
- Summary
- A path traversal vulnerability in datamodel-code-generator allows attackers to write ProtoBuf schema files outside of designated directories, potentially creating or overwriting files with proto syntax declarations. This could lead to persistent modifications in the target system's file structure.
- Exploitability
- Exploitation requires a victim or automated job to process an attacker-controlled Protobuf schema with grpcio-tools package, making it moderately difficult but possible to achieve with proper targeting of vulnerable systems.
- Blast radius
- The impact is limited to file creation or overwrites in writable locations, but could be significant if the processing occurs in sensitive directories like configuration or deployment areas.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to version 0.81.0 or later to fix the path traversal vulnerability in Protobuf schema processing.
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAK_IMPORT_PATTERN and consumed by _write_missing_weak_imports in src/datamodel_code_generator/parser/protobuf.py. Exploitation requires a victim or automated job to process the attacker-controlled schema with Protobuf input support, which requires the grpcio-tools package. The paths escape the weak_imports temporary directory before protoc runs, allowing creation of directory trees and new files or overwrite of existing writable files with a generated Protobuf syntax declaration. The effect persists when later Protobuf compilation fails. The written content is limited to a proto2 or proto3 syntax declaration, and direct arbitrary code execution has not been demonstrated. This issue is fixed in version 0.81.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-22, CWE-73
Public exploit & PoC references
- https://github.com/datamodel-code-generator/datamodel-code-generator/commit/5e94b8f4203198798ec66b8e48217f70af69a0dc
- https://github.com/datamodel-code-generator/datamodel-code-generator/releases/tag/0.81.0
- https://github.com/datamodel-code-generator/datamodel-code-generator/security/advisories/GHSA-77xj-x4rm-935c
- https://github.com/datamodel-code-generator/datamodel-code-generator/security/advisories/GHSA-77xj-x4rm-935c
All references
- https://github.com/datamodel-code-generator/datamodel-code-generator/commit/5e94b8f4203198798ec66b8e48217f70af69a0dc
- https://github.com/datamodel-code-generator/datamodel-code-generator/releases/tag/0.81.0
- https://github.com/datamodel-code-generator/datamodel-code-generator/security/advisories/GHSA-77xj-x4rm-935c
- https://github.com/datamodel-code-generator/datamodel-code-generator/security/advisories/GHSA-77xj-x4rm-935c
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2014-125130PoC
- HIGHCVE-2024-58387PoC
- HIGHCVE-2026-100636PoC
- HIGHCVE-2026-100637PoC
- HIGHCVE-2026-100638PoC
- HIGHCVE-2026-101153
- HIGHCVE-2026-101885PoC
- HIGHCVE-2026-102226
Related by shared AI tags and CWE weakness class. Browse the full archive.