CVE-2026-108597
cohere-python: Cohere Python SDK 5.11.0 through 7.2.0 Path Traversal via SageMaker Tar Extraction
cohere-ai cohere-pythonRuntimes & languages
CVSS
5.9MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.29%Chance of exploitation activity in the next 30 days, higher than 20% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to overwrite files on the SDK host.
Text from CVE List
Affected versions 1
- cohere-pythonaffected: 5.11.0 through 7.2.0CVE List
References 4
- hackmd.io/@haind/cohere-python-sagemaker-s3-archive-path-traversalAdvisoryvia CVE List
- vulncheck.com/advisories/cohere-python-sdk-5.11.0-through-7.2.0-path-traversal-via-sagemaker-tar-extractionAdvisoryvia CVE List
- github.com/cohere-ai/cohere-python/blob/0eacfe77e1710322b355928574cfec18f6791c42/src/cohere/manually_maintained/cohere_aws/client.py#L101-L123Referencevia CVE List
- github.com/cohere-ai/cohere-pythonReferencevia CVE List