Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to overwrite files on the SDK host.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
Present
Additional conditions required
Privileges Required
Low
Basic privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products
cohere-ai:cohere-python
References 4
https://hackmd.io/@haind/cohere-python-sagemaker-s3-archive-path-traversal
NVD
https://github.com/cohere-ai/cohere-python/blob/0eacfe77e1710322b355928574cfec1…
NVD
https://github.com/cohere-ai/cohere-python
NVD
https://www.vulncheck.com/advisories/cohere-python-sdk-5.11.0-through-7.2.0-pat…
VulnCheck Advisory: Cohere Python SDK 5.11.0 through 7.2.0 Path Traversal via SageMaker Tar Extraction