Description
A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get_model_meta of the file berrynet/dlmodelmgr.py of the component Model Package Metadata Handler. The manipulation of the argument label leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-21
Score: 5.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Path traversal enabling remote disclosure of arbitrary files
Action: Patch Immediately
AI Analysis

Impact

The vulnerability lies in the DLModelManager.get_model_meta function of BerryNet’s Model Package Metadata Handler, where an attacker can manipulate the label argument to construct a path that traverses directories, allowing the remote retrieval of arbitrary file contents. This flaw can lead to information disclosure beyond the intended data set.

Affected Systems

DT42 BerryNet up to version 3.10.2, specifically the Model Package Metadata Handler component.

Risk and Exploitability

The CVSS score of 5.1 indicates medium severity, while the EPSS score of less than 1% suggests a very low probability of exploitation, and the issue is not in CISA’s KEV catalog. The description states the flaw can be exploited remotely via a crafted label parameter, potentially exposing sensitive configuration or code through directory traversal.

Generated by OpenCVE AI on October 21, 2026 at 14:59 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade BerryNet to a version in which the DLModelManager.get_model_meta function is fixed or removed.
  • If upgrading is not immediately possible, isolate the application process and enforce strict file system permissions so that the component cannot read files outside its designated directory.
  • Add input validation or sanitization to the web API that rejects label parameters containing path traversal characters such as ".." or absolute paths.

Generated by OpenCVE AI on October 21, 2026 at 14:59 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 05:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 21 Oct 2026 04:00:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get_model_meta of the file berrynet/dlmodelmgr.py of the component Model Package Metadata Handler. The manipulation of the argument label leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Title DT42 BerryNet Model Package Metadata dlmodelmgr.py DLModelManager.get_model_meta path traversal
First Time appeared Dt42
Dt42 berrynet
Weaknesses CWE-22
CPEs cpe:2.3:a:dt42:berrynet:*:*:*:*:*:*:*:*
Vendors & Products Dt42
Dt42 berrynet
References
Metrics cvssV2_0

{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 3.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 3.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 5.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Dt42 Berrynet
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-21T13:39:54.530Z

Reserved: 2026-10-20T21:39:26.243Z

Link: CVE-2026-114040

cve-icon Vulnrichment

Updated: 2026-10-21T13:39:50.433Z

cve-icon NVD

Status : Deferred

Published: 2026-10-21T04:18:10.100

Modified: 2026-10-21T14:26:26.470

Link: CVE-2026-114040

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T10:45:03Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')