{"data":{"id":"d380146d-2229-4ca9-bc74-eb23bed97d1a","title":"CVE-2021-41127: Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions…","summary":"Rasa, an open source machine learning framework for text and voice conversations, has a vulnerability in its function that loads trained model `tar.gz` files. A malicious actor can craft a `model.tar.gz` file that overwrites or replaces bot files in the bot directory.","solution":"The vulnerability is fixed in Rasa 2.8.10. For users unable to update, ensure that users do not upload untrusted model files, and restrict CLI or API endpoint access where a malicious actor could target a deployed Rasa instance.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-41127","publishedAt":"2021-10-21T21:15:08.160Z","cveId":"CVE-2021-41127","cweIds":["CWE-22","CWE-23"],"cvssScore":"7.3","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["rasa@< 2.8.10 (fixed: 2.8.10)"],"affectedPackageNames":["rasa"],"affectedPackageRefs":["pypi:rasa"],"affectedVendors":[],"affectedVendorsRaw":["Rasa"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Rasa arbitrary file overwrite via crafted model tar.gz loading","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00758,"epssCheckedAt":"2026-11-04T18:09:13.655Z","kevDateAdded":null,"advisoryAliases":["GHSA-4365-fhm5-qcrx"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:59:16.548Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2021-10-15T15:51:37.290Z","daysToFix":-6,"fixCheckedAt":"2026-10-29T21:50:13.106Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"rasa","fixedVersion":"2.8.10","matchedVersion":"2.8.10","fixReleasedAt":"2021-10-15T15:51:37.290Z","daysToFix":-6,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:50:12.956Z"}]}}