The vulnerability is a path traversal flaw in the MatplotlibDataset.save() method of the kedro-datasets library. It lets an attacker provide an absolute plot name that bypasses directory validation, enabling an attacker to write or overwrite files outside the intended dataset directory. This flaw is categorized as CWE-22 and could allow the creation of arbitrary files, including executables or configuration files, potentially leading to further compromise.

The affected product is kedro-datasets from the kedro-org organization. Versions in the 9.3.0 through 9.6.0 range are vulnerable. No other release or version information is provided in the CVE entry.

The CVSS score of 7.1 indicates a moderate to high severity. The EPSS score of less than 1% reflects a currently low likelihood of exploitation, but the path traversal flaw does not require any special privileges and could be triggered by any code that calls save() with an attacker-supplied name. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves an attacker supplying an absolute plot name to MatplotlibDataset.save(), allowing them to write files to arbitrary locations on the filesystem, which may forge configuration files, inject scripts, or replace legitimate resources.