Affected MosaicML Composer versions up to 0.32.1 contain a flaw in the checkpoint extraction routine where the tarball.extractall function does not validate file paths. This oversight permits an attacker to supply a malformed tar file that includes path traversal sequences, enabling extraction of files outside the intended destination directory. Such a capability can lead to arbitrary file read or overwrite, compromising system integrity and confidentiality.

MosaicML Composer, specifically releases 0.32.1 and earlier. The vulnerability resides in composer/utils/checkpoint.py and applies to all installations of the Composer library that invoke the checkpoint extraction component.

The CVSS score of 5.3 indicates a medium severity. No EPSS data is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited current exploitation. However, the description states that the attack can be executed remotely, implying that an attacker could deliver a malicious tarball over a network interface that processes checkpoint files without proper path validation. If exploited, the impact is local to the machine executing the extraction but could affect any files accessible to the process.