GHSA-8qvf-mr4w-9x2c: Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion

Summary

GHSA-8qvf-mr4w-9x2c is a path traversal flaw in Mesop when it uses the disk-based `FileStateSessionBackend`. The `state_token` field of a `UserEvent` sent to the `ui_stream` endpoint in `mesop/server/server.py` is passed unchecked to `_make_file_path`, so `../` sequences can point file access outside `base_dir`. The source states this can cause denial of service through crash loops and arbitrary file reads, writes or deletions.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• mesopPyPINo LLM dependency detected

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
• InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online