HighVulnerability
CVE-2021-41127: Rasa arbitrary file overwrite via crafted model tar.gz loading
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2021-41127
- Published
- Record updated
- Affected
- rasa < 2.8.10
- Fixed in
- 2.8.10
- released October 15, 2021, 6 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.8%
Summary
Rasa, an open source machine learning framework for text and voice conversations, has a vulnerability in its function that loads trained model `tar.gz` files. A malicious actor can craft a `model.tar.gz` file that overwrites or replaces bot files in the bot directory.
Mitigation
The vulnerability is fixed in Rasa 2.8.10. For users unable to update, ensure that users do not upload untrusted model files, and restrict CLI or API endpoint access where a malicious actor could target a deployed Rasa instance.
Related items
- MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
- HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSimilar attack · NVD/CVE Database